Close this search box.

FCL DNS issues after SSLVPN had been connected

FortiEMS internal DNS Servers are configured on the all Ethernet adapters if SSLVPN is online.

  • jfi. FortiGate distributes the DNS Servers configured in the SSLVPN Settings, or the Portal.

You may change this behavior, if you select the VPN Profile click  Advanced and then disabl prefer SSL VPN DNS

Below you may find further informations.

Maybe you’re also expieriencing DNS cache issues, then you may also check the DNS Cache Service Control.

Screenshot is from FortiEMS Server 6.4.8 but applies also to version 7.0.x and maybe above

Windows Client DNS cache troubleshooting tips

check your current DNS Servers for your adapters with ipconfig /all

Check the Windows Client DNS cache with ipconfig /displaydns

You may verify the currently resolved ip address  for a domain with a ping.


PS C:\Users> ping

Ping wird ausgeführt für [] mit 32 Bytes Daten:

Antwort von Bytes=32 Zeit=29ms TTL=53

check DNS cache

PS C:\Users> Get-DnsClientCache -Name

Entry                     RecordName                Record Status    Section TimeTo Data   Data

                                                    Type                     Live   Length

—–                     ———-                —— ——    ——- —— —— —-                  A      Success   Answer    2269      4

nslookup to your DNS server (! this might not be the same result as if you do a simple ping)

PS C:\Users> nslookup

Server:  UnKnown

Address:  fda1:3fb1:0:10f::1

Nicht autorisierende Antwort:



wireshark (usally it would be a overkill to troubleshoot a simple DNS request)