SSLVPN - split tunel dns vs dns sslvpn setting

[wsal]

Hello, I have Fortigate with a lot of sslvpn portals.
in the sslvpn settings I have entered local DNS servers which are replaced on the network card of the end device during the Forticlient connection and this is ok.

But I have one portal that needs to use different dns than those in settings. does setting split dns replace the DNS on the network card of the computer with forticlient?

the problem is when computers with AD are used and have a different DNS than the domain controller, which is sometimes problematic

Fortios 7.0.14

[sw2090]

afair split dns will set dns servers on the client's vpn interface. It can also be specified to match only a certain domain while anything else will be resolved by the clients dns servers.

[adimailig]

Hi  @wsal 

If your goal is to use different DNS server for specific wen portal, you can configure the DNS servers via CLI. Specifying the DNS server settings at the portal level is overriding those at the global level.

config vpn ssl web portal
    edit <portal>
        set dns-server1 <ip4_addr>
        set dns-server2 <ip4_addr>
    end

Reference : https://community.fortinet.com/t5/FortiGate/Technical-Tip-Configuring-DNS-servers-per-SSL-VPN-Portal...

If you need split DNS, you may refer to below guide instead.
https://community.fortinet.com/t5/FortiGate/Technical-Tip-Split-DNS-support-for-SSL-VPN/ta-p/194766