How to force DNS query pass into SSL VPN tunnel
Here is a SSL VPN scenario. Client is able to establish SSL VPN tunnel successfully and USG enabled “Force all client traffic to enter SSL VPN tunnel” in SSL VPN tunnel.
However, the DNS queries were still sent out from the Ethernet interface(192.168.1.1) but not go through the SSL VPN TAP tunnel interface (192.168.22.5).
The reason is that the Windows platform will keep using the interface DNS server IP as its preferred DNS server by default.
In this case, you can change the SSL VPN TAP interface metric to 1 and higher the interface priority.
Then SSL VPN interface priority will become higher than Ethernet interface and the DNS query will be sent out through the SSL VPN tunnel.
Go to configure your TAP interface > Edit IPv4 IP address > Click Advanced > Change Interface metric as 1.
Categories
- All Categories
- 347 Beta Program
- 2.1K Nebula
- 114 Nebula Ideas
- 77 Nebula Status and Incidents
- 5K Security
- 44 USG FLEX H Series
- 246 Security Ideas
- 1.2K Switch
- 65 Switch Ideas
- 901 WirelessLAN
- 33 WLAN Ideas
- 5.8K Consumer Product
- 204 Service & License
- 326 News and Release
- 71 Security Advisories
- 21 Education Center
- 5 [Campaign] Zyxel Network Detective
- 1.8K FAQ
- 831 Nebula FAQ
- 401 Security FAQ
- 219 Switch FAQ
- 190 WirelessLAN FAQ
- 45 Consumer Product FAQ
- 136 Service & License FAQ
- 34 Documents
- 34 Nebula Monthly Express
- 71 About Community
- 61 Security Highlight