FortiClient vpn dns suffix issue

[Roy690916]

hi

My FortiGate 200F , OS version : 7.0.16

setting use ssl vpn and dns suffix (my environment have mutiliple domain)

config vpn ssl settings

     set dns-suffix “test1.com; test2.co.uk; test3.net”

  end

my internal web  =>  https://www1.test1.com  

apple iphone  forticlient vpn  After connecting   can connect  https://www1.test1.com  => OK 

input hostname   www1 => OK

but  android forticlient vpn  version 7.4.1.0176  , not working  

only input  Complete FQDN https://www1.test1.com  OK  , hostname  not OK 

What is the reason for this?

[AEK]

Hi Roy

This should have something to do with the search list in client's DNS config

When search list is properly configured, when you try reach a hostname without FQDN, the DNS client adds the "search" domain to the hostname, then sends the DNS request.

It seems for some reason on your Android device the search domain is not set (or not set properly) when you connect with VPN.

There should be a method or some tool to check the search domain on Android.

[kaman]

Hi Roy690916,

You can check with the different Anroid and FortiClient version 7.2.x.

Please collect the SSL VPN logs and check both working and non-working logs

Also, please refer to the below document for more information:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-SSL-VPN-User-DNS-Suffix-Configuration-Caus...

Regards,
Aman