Web Security Services

  • 1.  Web and Cloud Access Protection Policy prevents local DNS from working

    Posted Mar 20, 2025 11:52 AM

    Community, Good morning,

    We have SES Complete as a Cloud SWG Agent type. All of our devices (Windows 11) are out of the office in a work at home environment. They are all connected through Fortinet SSL VPN for now.

    I am having an issue with enabling the Web and Cloud Access Protection policy and that is that it disables DNS resolution for local services. If I turn off the WCAP policy, I get local resolution back, keeping the VPN connected of course.  The policy redirection method is set to Tunnel and Identify Traffic is set to Based on console user.

    Please could you help me resolve this dilemma where we need to maintain VPN plus Cloud SWG web filtering capability without affecting local DNS.

    Regards,

    Rojopipe



  • 2.  RE: Web and Cloud Access Protection Policy prevents local DNS from working

    Posted 7 days ago

    You can disable DNS interception completely in the ATM section on WSS portal or bypass your internal domain.


    Original Message