Yet another SSL-VPN / IPsec question - DNS suffix

[samoa683]

Not that I'm pushing 7.6 in to production anywhere, but with SSL-VPN being totally retired, there's one show-stopper with IPsec that I'm wondering if anybody has found a solution for.

At least with non-EMS managed FortiClients (95% of my install base) on an IPsec VPN setup you can't push a DNS suffix to a client like you can on SSL-VPN. DNS lookups work fine as long as you use a FQDN - but - you can't use just the hostname to connect to things. Has anybody found a solution for this or heard rumors of it being addressed at some point?

[funkylicious]

hi,

have you tried https://docs.fortinet.com/document/fortigate/7.6.2/administration-guide/707911/ipsec-dns-suffix ?