Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
48sivadm
New Contributor

SSL VPN Split DNS configured according to docs but not working.

According to this, only traffic to my domain should be crossing the VPN. 

config vpn ssl web portal
edit Secured-Access
set tunnel-mode enable
set auto-connect enable
set keep-alive enable
set save-password enable
set ip-pools Secured-Pool
set split-tunneling-routing-address Secured-Routing
set forticlient-download-method ssl-vpn
config split-dns
edit 1
set domains Secured-Domain
set dns-server1 My-DNS1
set dns-server2 My-DNS2
next
end
next
end

 

However, I see non-secured domain resolution against my servers. What would be the cause of this? Are there any supplemental configurations that the above referenced technical tip doesn't mention?

2 REPLIES 2
AEK
SuperUser
SuperUser

Is it FortiClient or FortiClient VPN?

Which FortiClient version?

Which Windows version?

Did you enable split-tunneling?

set split-tunneling enable

 

AEK
AEK
48sivadm
New Contributor

 Windows 11 Enterprise 22H2 FortiClient EMS 7.2.3 Forticlient 7.2.4

Windows 11 Pro 23H2 Forticlient VPN Only 7.0.7

Split Tunneling is enabled. If it weren't, I wouldn't be able to browse the internet because the tunnel access is not set for all traffic.

Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors