How to connect to Local LAN using FortiClient SSL VPN

[pxiannie]

I'm able to connect to the ssl vpn, after connected I can access to my f drive but when I ping my server name I can't find my host server. Also, I cant access to http://servername:5050/Login.aspx , it shows me DNS resolve failed, but I can access to http://192.168.X.XX:5050/Login.aspx 

Policy 1

Incoming Interface: lan
Outgoing Interface: virtual-wan-link
Source: all
Destination: all
Action: Accept
Service: all

Policy 2

Incoming Interface: SSL-VPN tunnel interface (ssl.root)
Outgoing Interface: lan
Source: SSL-VPN Address, Employees user group
Destination: Local-LAN
Action: Accept
Service: all

How to solve this problem? Please help T.T

FortiClient 

[Nik_Aiman]

Hi there,

Looks like your machine unable to resolve dns.

Do you have a sslvpn policy to allow your client to reach to dns server?

[AEK]

In addition to @Nik_Aiman 's comment, you may check if SSL VPN server config on FortiGate assigns DNS server IP to clients. This should be the IP of your remote LAN's DNS server.

[pxiannie]

Hi, the remote LAN's DNS server is refer to the DNS server or Dynamically Obtained DNS Servers ? I'm confused with this two, currently my dns in config vpn ssl settings are same with dns in config system dns.

[pxiannie]

What u mean is I have to set dns server to ssl.root? To reach the dns server is it have to set in interface? I try to set the dns server but it show error: command parse error before 'dns-server1'
Command fail. Return code -61
edit "ssl.root"
set vdom "root"
set ip 10.10.10.0 255.255.255.255
set allowaccess ping
set type tunnel
set alias "SSL VPN interface"
set snmp-index 4
next

[AEK]

ello

You can set the DNS servers here. The client will use these DNS servers for hostname resolution once it connects to SSL VPN.

[pxiannie]

I did set my DNS server for SSL VPN. I set it based on DNS settings, does it correct?

[AEK · Accepted solution]

I don't think so.

You have set a public dns, while your internal server's IP is private.

You have to set DNS IP to your internal DNS server.

[pxiannie]

I'm able to access my local server after specify the DNS ip same as my internal DNS server !! Thanks !! You really help me a lot!! 

[smayank]

Hello

It seems DNS is not getting resolved. Please check if DNS IP address is assigned by fortigate.

If DNS server is behind firewall you can create DNS and it will be pushed towards the client

Thanks & Regards 
Mayank Sharma