Force users using SSL VPN to access internet.

[ckon9]

With our equipment and configuration:

- FortiGate 100E with UTM license

- SSL VPN with Azure SAML

- FortiClient VPN free.

I want to restrict internet access when users use their laptops outside the company network. If they want to access, they are required to use the VPN connection provided by the company.

Is there any way help me to do this?

Thanks.

[pavankr5]

Hello @ckon9 ,

Please check this article on Disabling 'Split-Tunnel' configuration 

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Disabling-Split-Tunnel-configuration/ta-p/....

This document explains once the split tunnel option is disabled, all user Internet traffic will reach FortiGate and VPN interface to WAN policy is needed hope this helps, please let us know if you have any queries.

Thanks,

Pavan

[srajeswaran]

Do you mean the users should not be using internet without the VPN?