To configure an SSL VPN connection:
- On the Remote Access tab, click Configure VPN.
- Select SSL-VPN, then configure the following settings:
- Click Save to save the VPN connection.
FortiClient supports split DNS tunneling for SSL VPN portals, which allows you to specify which domains the DNS server specified by the VPN resolves, while the DNS specified locally resolves all other domains. This requires configuring split DNS support in FortiOS.
If using FortiClient on a Windows Server 2016 machine, ensure that you disable IE Enhanced Security. Otherwise, SSL VPN may not function as configured.