FortiClient - split and full tunnel options to FortiGate

[1ryan1]

Currently using Cisco Anyconnect where if a user wants to tunnel all or use their local Internet (split tunnel) they can choose to by selecting the appropriate group in the AnyConnect window. Does FortiClient allow you do this? If not, are there workarounds for users who require this feature (sometimes they need to be sourced from corp public IP).

[Anthony_E]

Hello Ryan,

Thank you for using the Community Forum.

I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible.

Regards,

[Anthony_E]

Hello Ryan,

I have found this document:

https://docs.fortinet.com/document/fortigate/6.0.0/cookbook/307303/ssl-vpn-split-tunnel-for-remote-u...

Could you please tell me if it helps?

Regards,

[1ryan1]

Thanks for the update.

It appears that sets up a split tunnel for a user part of the sslvpngroup. How does that same user use the FortiClient to do a full tunnel back to corp, assuming the split tunnel is already in place?

[1ryan1]

Is it possible to use a VDOM to separate the split tunnel/full tunnel policy?