Technica; Tip: How to allow SSL VPN users to use FortiGate as DNS server

[hhasny]

Description	This article describes how to allow SSL VPN users to use FortiGate as a DNS server.
Scope	FortiGate and SSL VPN.
Solution	There are instances where FortiGate is used for internal DNS servers.  To allow SSL VPN users to use FortiGate as a DNS server, it is necessary to configure the ssl.root interface under the DNS Service interfaces. In this example, the DNS server IP 10.201.2.129 is the port10 IP address. Ensure that the DNS server IP address is configured within the SSL VPN profile or under SSL VPN settings. There are several methods available for setting the DNS server on the FortiClient system. Refer to the below article :  Option 1: Technical Tip: Configuring DNS servers per SSL VPN Portal Option 2: Select Specify settings in the DNS server of the SSL VPN setting option: Technical Note: SSL VPN DNS resolution using 'same as client system DNS' option Below is the result when nslookup is done for internal and external names: .