Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor III

SSLVPN - split tunel dns vs dns sslvpn setting

Hello, I have Fortigate with a lot of sslvpn portals.
in the sslvpn settings I have entered local DNS servers which are replaced on the network card of the end device during the Forticlient connection and this is ok.

But I have one portal that needs to use different dns than those in settings. does setting split dns replace the DNS on the network card of the computer with forticlient?

the problem is when computers with AD are used and have a different DNS than the domain controller, which is sometimes problematic

Fortios 7.0.14


afair split dns will set dns servers on the client's vpn interface. It can also be specified to match only a certain domain while anything else will be resolved by the clients dns servers.


"It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

-- "It is a mistake to think you can solve any major problems just with potatoes." - Douglas Adams

Hi  @wsal 

If your goal is to use different DNS server for specific wen portal, you can configure the DNS servers via CLI. Specifying the DNS server settings at the portal level is overriding those at the global level.

config vpn ssl web portal
    edit <portal>
        set dns-server1 <ip4_addr>
        set dns-server2 <ip4_addr>

Reference :

If you need split DNS, you may refer to below guide instead.

Best Regards,

Arnold Dimailig
TAC Engineer

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors