fortigate-ipsec-40-mr3

Routing all remote traffic through the VPN tunnel Internet-browsing configuration
To route all traffic through a route-based VPN
1 At the FortiGate dialup client, go to Router > Static > Static Route.
2 Select the default route (destination IP 0.0.0.0) and then select Edit. If there is no
default route, select Create New. Enter the following information and select OK:
Destination IP/Mask 0.0.0.0/0.0.0.0
Device Select the IPsec virtual interface.
Distance Leave at default.
All packets are routed through the VPN tunnel, not just packets destined for the
protected private network.
Configuring a FortiClient application to support Internet browsing
By default, the FortiClient application configures the PC so that traffic destined for the
remote protected network passes through the VPN tunnel but all other traffic is sent to
the default gateway. You need to modify the FortiClient settings so that it configures the
PC to route all outbound traffic through the VPN.
To route all traffic through VPN - FortiClient application
1 At the remote host, start FortiClient.
2 Go to VPN > Connections.
3 Select the definition that connects FortiClient to the FortiGate dialup server.
4 Select Advanced and then select Edit.
5 In the Edit Connection dialog box, select Advanced.
6 In the Remote Network group, select Add.
7 In the IP and Subnet Mask fields, type 0.0.0.0/0.0.0.0 and select OK.
The address is added to the Remote Network list. The first destination IP address in
the list establishes a VPN tunnel. The second destination address
(0.0.0.0/0.0.0.0 in this case) forces all other traffic through the VPN tunnel.
8 Select OK.
IPsec VPNs for FortiOS 4.0 MR3
150 01-434-112804-20120111
http://docs.fortinet.com/