User loses network connection when connecting to IPSEC VPN

[callumoldershaw]

One of our users have reported everytime they try to connect to the VPN it disconnects them from their network connection. 

Does anybody have any potential solutions? 

[AEK]

This is probably due to default route injection by VPN.

User can check if this is the case by checking his routing table once VPN is connected, and check if he finds a default route through the tunnel.

[Richie_C]

Hi @callumoldershaw 

Its difficult to know without some more information. A few things to consider:

- Are they using FortiClient to connect to the VPN? 

- Are they able to establish the VPN OK?

-What do you mean by disconnecting from their network? Maybe its direct internet access or is it the local network.

BR

[callumoldershaw]

Hi, 

Thanks for the reply, 

The user is using FortiClient to connect to the VPN.

They login to the VPN then their Internet Connection drops out completely. 

[Richie_C]

Ok. What is the expection?

• The user should be able to browse to the internet via their local connection. This requires split tunneling to be configured on the VPN. This article might be useful:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Enable-split-tunnel-For-IPsec-VPN/ta-p/192...

• Internet traffic should go via the VPN and breakout from the VPN concentrator?  If the breakout point is the hub, make sure that the required firewall policies are in place.

Regards

[EasyDoesIT]

Is split-tunneling setup or full tunnel? Maybe there isn't a policy on the Fortigate if it's full tunnel to get out to the internet as required. 
Also run a route print on the client to see if the default route on the client goes through the SSLVPN tunnel gateway.