Split Tunneling in Web Mode

[Albert_Coll]

Hi,

I've setup some SSL VPN in Web Mode only (clientless), so that the remote users can now login to their Fortigate portal to reach their internal resources offered on each, while keeping the rest of their own connetivity resources for other purposes.

But I've been told to disable Split-Tunneling in all the Web Mode SSL portals of a Fortigate, so that any clientless user cannot reach anything else while connected to his Fortigate portal . (Just like enabling split-tunneling in the opposite way to what it is intended for).

Unlike the SSL VPN in tunnel mode, where the split tunneling features allow you to setup such requirement, I have not found anything alike for Web mode, possibly because it does not make to much sense.

I would really appreciate any input about this.

Regards.

Albert.