You can now assign one or more DNS suffixes to the FortiGate SSL VPN configuration so that SSL VPN clients do not need to use full-qualified host names to connect to internal resources. If you add one suffix, it is always attached to DNS queries.

If you add more than one suffix the FortiGate unit will attempt a DNS lookup by adding each suffix and use the first one that can be found in the DNS database. Multiple suffixes should be added in the proper search order. You can use up to 253 characters to add one or more DNS suffixes. Separate the suffixes with a space.

For example, if an organization requires DNS suffixes for example.com and example.org and you want DNS queries to try example.com first, you can use the following command to add these suffixes to the SSL VPN configuration:

Use the following command to add a DNS suffix that is used for SSL VPN sessions: