50% packet loss when using "a connection bridge"

Question

Good morning everyoneWe are experiencing a strange situation. The following is the scenario.The user connects via SSL VPN to the head office's fortigate and then, in this connection, with the head office's devices, the packet loss is minimal. However, this SSL VPN connection needs to access a server with an application hosted in a branch office. On this route, the SSL VPN to the head office and from the head office to the branch office has an average packet loss of 50%, sometimes 60%.Important information: communication between the head office and the branch office is normal, with an acceptable packet loss of only 0.5%.In short:User connects via SSL VPN to Fortigate at headquartersConnection established with headquartersPacket loss: minimalUser accesses devices at headquartersStable connectionPacket loss: minimalUser tries to access server with application at branch officeSSL VPN connection to headquartersConnection from headquarters to branch officePacket loss: average of 50%, sometimes 60%

UniMK · Accepted Answer

I was part of the established connection, but specifically part of the second phase of ipsec, I created the addresses again with the option marked as active static route.
The strange thing is that both Route Lookup and Policy Match return accepted routes and allowed policies.

UniMK · Answer

Important informationCommunication between the head office and the branch is normalPacket loss: acceptable, only 0.5%And communication between the head office and the branch is carried out by 3 IPSEC internet links using Aggregated Ipsecand both equipment, head office and branch, use the fortigate 100f

Sign up

Login with SSO

Login to the community

Login with SSO