New Member
October 30, 2020
Question
Cannot open port 443 on Fortigate60E
- October 30, 2020
- 9 replies
- 10068 views
Dear all,
We wanna set monitoring of the office WAN IP address 176.74.140.8 to the service 24x7 so I have to fully open the port 443. Those are the steps I set:
[ul][ul]FW-MAIN # show firewall vip 24x7
config firewall vip
edit "24x7"
set uuid c9886ad2-03e9-51eb-091b-8c2431f4ac90
set extip 176.74.140.8
set mappedip "172.16.2.1"
set extintf "wan1"
set portforward enable
set extport 443
set mappedport 443
next
end
FW-MAIN # show firewall policy 8[/ul][/ul]
config firewall policy
edit 8
set status disable
set name "Open HTTPS"
set uuid 8dbe4ac8-031a-51eb-570c-9678721d149f
set srcintf "wan1"
set dstintf "internal"
set srcaddr "all"
set dstaddr "24x7"
set action accept
set schedule "always"
set service "HTTPS"
set logtraffic all
set comments "Allow 24x7 monitoring"
set nat enable
next
end
Here is the list of the firewall rules:
Rule number 1:
FW-MAIN # show firewall policy 5
config firewall policy
edit 5
set name "Internal"
set uuid 6a4dd636-ec62-51ea-9f46-29c5c9ce9afb
set srcintf "internal" "VLAN16-WIFI" "VLAN12-INTERNAL"
set dstintf "internal" "VLAN16-WIFI" "VLAN12-INTERNAL"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
next
end
Rule 2:
FW-MAIN # show firewall policy 3
config firewall policy
edit 3
set name "Internal to WAN"
set uuid 948ca2f2-8e7a-51e9-276c-73602409600d
set srcintf "internal" "VLAN16-WIFI" "VLAN12-INTERNAL"
set dstintf "wan1"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set utm-status enable
set ssl-ssh-profile "certificate-inspection"
set dnsfilter-profile "default"
set nat enable
next
end
Next rule:
FW-MAIN # show firewall policy 2
config firewall policy
edit 2
set name "GUEST-VLAN20-ALLOW"
set uuid 306efa4a-8c40-51e9-d3dd-f71a581b638d
set srcintf "GUEST-VLAN20"
set dstintf "wan1"
set srcaddr "all"
set dstaddr "all"
set action accept
set schedule "always"
set service "ALL"
set nat enable
next
end
Next to last rule:
FW-MAIN # show firewall policy 8
config firewall policy
edit 8
set status disable
set name "Open HTTPS"
set uuid 8dbe4ac8-031a-51eb-570c-9678721d149f
set srcintf "wan1"
set dstintf "internal"
set srcaddr "all"
set dstaddr "24x7"
set action accept
set schedule "always"
set service "HTTPS"
set logtraffic all
set comments "Allow 24x7 monitoring"
set nat enable
next
end
Last rule:
FW-MAIN # show firewall policy 3
config firewall policy
edit 0
set name "Implicit Deny"
set srcintf "any"
set dstintf "any"
set srcaddr "all"
set dstaddr "all"
set action Deny
set schedule "always"
set service "ALL"
set utm-status enable
next
end
By following those steps, port 443 is still not opened. Can you help me with solving of this issue please?
Kind regards,
Adrián
