FG200D - ssl vpn cert warning and pushing of dns suffix fails

[cparfon]

Hello, 

I have a FG200D box and I've have configured a SSL-VPN which works fine. However there are 2 issues which I couldn't find an answer too, and I'd really like to solve them.

1. I've imported a VALID SSL commercial wildcard ssl certificate (signed by Geotrust CA) and when clients are connecting to the ssl vpn tunnel they get: "

The certificate for the SSLVPN server is invalid.You are connecting to an untrusted server. which could put your confidential information at risk." which is quite annoying. SO again, this happens only when using 'FortiClient'(for all platforms, Win/MacOS/Linux). However, when loading the SSL VPN Portal in browser the SSL certificate looks fine (green bar). What could be the issue?

2. I have the following setup:

config vpn ssl settings . . set dns-suffix ”ourdomain.net” . . end   But, unfortunately, when connecting to the VPN, I don't get the dns suffixed pushed to the client (all platforms, Win/MAcOS/Linux). What could be the issue?   Thanks.