SSLVPN-Client with split-tunnel in NAT64 network fails

[tinyadmin]

Hello,

our FortiGate is providing SSLVPN with split tunnel dialin (IPv4 only). Works fine, but got an user complain it doesn't work if the client-network is behind a NAT64 gateway (like it can be a Fortigate, too). The FortiClient VPN is counting up to 98% and breaks down.

NAT64 with DNS64 works fine for many other services in the network.

My question: is here anyone who configured a Fortigate as SSLVPN dialin system with split tunnel routing (only company networks are routed in the tunnel, all others use the default route of the client)?

Looking forward to share the experiance.

Regards

Tinyadmin