Technical Tip: Convert SSL VPN Split tunnel to Full tunnel

[Mrinmoy]

Description	This article explains how to convert an SSL VPN from split tunnel mode to Full tunnel mode.
Scope	FortiGate v6.4 or later.
Solution	Identify the portal which is under VPN ->SSL-VPN Settings Modify the portal from 'Enabled Based on Policy Destination' to 'Disabled'.  For split tunnel, there is already a firewall policy configured to allow the traffic from the 'SSL VPN client' to the 'Internal/ LAN' Network. A full tunnel is also responsible for allowing the traffic from the 'SSL VPN client' to the 'Public' Network. Another policy is necessary to allow that traffic. Verification: In the case of a split tunnel, only one route (internal network) will be installed in the remote computer. The full tunnel will install a default route in a remote computer with a lower matric.