FortiSASE
FortiSASE delivers both a consistent security posture and an optimal user experience for users working from anywhere. Secure your hybrid workforce by closing security gaps, plus simplify operations.
ChrisTan
Staff
Staff
Article Id 417514
Description This article describes that after the upgrade to the Feature version, 'Use endpoints' system DNS' is no longer supported.
Scope FortiSASE.
Solution

The new FortiSASE instance will support IPsec VPN instead of SSL VPN. Some SSL VPN features like 'Use endpoints' system DNS' will be removed.

 

Below is an example of an implicit DNS rule for a FortiSASE instance with SSL VPN:

 

2025-11-03_14h29_36.png

 

After migrating to IPsec VPN, this option will no longer be visible:

 

2025-11-03_14h41_32.png

 

The backend POP will act as the DNS server, and update the endpoint DNS with the tunnel IP address 100.81.0.1.

Contributors