FortiGate Next Generation Firewall utilizes purpose-built security processors and threat intelligence security services from FortiGuard labs to deliver top-rated protection and high performance, including encrypted traffic.
This article explains and offers solutions for an issue where iPhone users specifically are unable to connect to a FortiClient SSL VPN while other users can connect to the split tunnel.
Scope
All products, FortiClient SSL VPN.
Solution
Due to iOS limitations, the DNS suffixes are not used for searches as in Windows. Using short names (i.e. not fully qualified domain names (FQDNs)) may not be possible.
To fix this, configure the DNS suffix to allow iPhone users to connect to SSL VPN with a split tunnel.
To use the SSL DNS server for a split tunnel, configure the DNS suffix on the FortiGate side. The following is an example of configuring the SSL DNS server for a split tunnel using FortiOS:
