We have IPSec VPN setup using FortiClient. We have split tunneling enabled so that web traffic goes out via the local network.
Is there a way to disable local lan access in the above scenario?
No, not really. The access is controlled from FortiClient - you either use split-DNS, or route all the traffic through the VPN connection. You can add in split DNS the local subnet to match the network of your client (that you want to disable). This way the traffic will flow through the VPN, but reach nowhere (hopefully the subnet in your fortigate does not match the local subnets of your client, and that your client doesn't simply reconfigure the local network with a new IP range).
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.