Comments

  • When the VPN connects with "Force all clients" option enabled, I cannot ping 8.8.8.8 or resolve any DNS. If I look in log manager and filter by the IP address that's given to the client, I was getting proxydeny on DNS query type SRV, DNS OpCode match and DNS oversized question. I've adjusted the proxy actions for both SRV…
  • I'm using AD for the authentication of VPN users
  • From looking at the log, I was getting proxydeny on DNS query type SRV, DNS OpCode match and DNS oversized question. I've adjusted the proxy actions for both SRV and OpCode match, but can't see anywhere to adjust the oversize
  • OK. From looking at the rules on the Firewall policy, there is one for the SSLVPN-Users to Any on any Port. Regardless, I added a rule from SSLVPN-Users to Any on port 80, 443 and 53 and tested again and then enabled "Force all client..." but still the same issue, no Internet access
  • Sorry, yes it's not taking the Public IP address of the Firewall. I'm not sure if it's definitely accessing the Internet via the SSLVPN. I did try that option (force all traffic), but when I connected to the VPN I then had no Internet access. I could only access the files within my network