How to force DNS query pass into SSL VPN tunnel






Here is a SSL VPN scenario. Client is able to establish SSL VPN tunnel successfully and USG enabled “Force all client traffic to enter SSL VPN tunnel” in SSL VPN tunnel.
However, the DNS queries were still sent out from the Ethernet interface(192.168.1.1) but not go through the SSL VPN TAP tunnel interface (192.168.22.5).
The reason is that the Windows platform will keep using the interface DNS server IP as its preferred DNS server by default.
In this case, you can change the SSL VPN TAP interface metric to 1 and higher the interface priority.
Then SSL VPN interface priority will become higher than Ethernet interface and the DNS query will be sent out through the SSL VPN tunnel.
Go to configure your TAP interface > Edit IPv4 IP address > Click Advanced > Change Interface metric as 1.
Categories
- All Categories
- 435 Beta Program
- 2.7K Nebula
- 176 Nebula Ideas
- 118 Nebula Status and Incidents
- 6.1K Security
- 428 USG FLEX H Series
- 298 Security Ideas
- 1.6K Switch
- 78 Switch Ideas
- 1.2K Wireless
- 44 Wireless Ideas
- 6.7K Consumer Product
- 274 Service & License
- 419 News and Release
- 88 Security Advisories
- 31 Education Center
- 10 [Campaign] Zyxel Network Detective
- 4.2K FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 83 About Community
- 89 Security Highlight