Skip to main content
prince
prince
New Member
January 8, 2026
Question

Client Network VPN issue

  • January 8, 2026
  • 3 replies
  • 512 views

Hi ,

We are facing a client network VPN issue.

One of our clients is using Fortinet FortiClient SSL VPN to provide access to their internal network. Our employees connect to the client’s SSL VPN in order to run scripts on the client environment.

  • The script runs automatically and can also be run manually

  • When employees work from their home network, the script runs without any issues

  • When employees work from our office network, the script stops in the middle and does not complete

Our office network uses a Fortinet FortiGate 100F firewall.

To troubleshoot, we:

 

  • Reduced the MTU size from 1500 to 1300

  • Configured TCP MSS as shown below:

config firewall policy
edit 12
set tcp-mss-sender 1300
set tcp-mss-receiver 1300
end

However, the issue still occurs only in the office network.

The same script works perfectly when run from the home network. can anyone help.

3 replies

AEK
SuperUser
AEK
SuperUser
January 8, 2026

Hi Prince

Check in the traffic logs if the related traffic has been blocked.

You need to enable traffic logs in the related policy and in the implicit deny policy as well.

AEK
prince
princeAuthor
New Member
January 9, 2026

i have not enable any security policy for this ip address 

 

please find the log 

39.505084 lan in 192.168.1.168.57227 -> 64.233.176.95.443: fin 3185805780 ack 2525228496
39.758448 lan out 64.233.176.95.443 -> 192.168.1.168.57227: fin 2525228496 ack 3185805781
40.453693 lan in 192.168.1.168.62820 -> 13.89.179.10.443: rst 2875022199 ack 2447749947
40.453694 lan in 192.168.1.168.62818 -> 52.123.129.14.443: rst 988526457 ack 987946580
40.453695 lan in 192.168.1.168.62817 -> 52.111.227.11.443: rst 3285180519 ack 4274128214
40.968393 lan in 192.168.1.168.59103 -> 13.89.179.10.443: syn 2455394257
41.178338 lan in 192.168.1.168.62628 -> 20.190.157.2.443: fin 55848987 ack 3228632594
41.192433 lan out 13.89.179.10.443 -> 192.168.1.168.59103: syn 2811099517 ack 2455394258
41.273913 lan in 192.168.1.168.59103 -> 13.89.179.10.443: ack 2811099518
41.273954 lan in 192.168.1.168.59103 -> 13.89.179.10.443: psh 2455394258 ack 2811099518
41.408833 lan out 20.190.157.2.443 -> 192.168.1.168.62628: fin 3228632594 ack 55848988
44.554125 lan in 192.168.1.168.63025 -> 216.239.34.181.443: udp 1250
44.555835 lan out 216.239.34.181.443 -> 192.168.1.168.63025: udp 40
44.556146 lan in 192.168.1.168.63025 -> 216.239.34.181.443: udp 1250
44.556175 lan in 192.168.1.168.63025 -> 216.239.34.181.443: udp 80
44.558276 lan out 216.239.34.181.443 -> 192.168.1.168.63025: udp 1250
45.469155 lan in 192.168.1.168.53838 -> 142.251.15.94.443: udp 1250
45.469228 lan in 192.168.1.168.53838 -> 142.251.15.94.443: udp 1250
45.469261 lan in 192.168.1.168.53838 -> 142.251.15.94.443: udp 81
45.517617 lan in 192.168.1.168.49358 -> 10.110.96.33.53: udp 38
45.715998 lan out 142.251.15.94.443 -> 192.168.1.168.53838: udp 40
45.716264 lan out 142.251.15.94.443 -> 192.168.1.168.53838: udp 1250
45.747738 lan in 192.168.1.168.63104 -> 108.177.122.97.443: fin 2366443599 ack 469272495
45.753026 lan in 192.168.1.168.49164 -> 35.185.195.2.443: syn 4028338379
45.947679 lan out 35.185.195.2.443 -> 192.168.1.168.49164: syn 3261255636 ack 4028338380
45.958149 lan in 192.168.1.168.49164 -> 35.185.195.2.443: ack 3261255637
45.958235 lan in 192.168.1.168.49164 -> 35.185.195.2.443: 4028338380 ack 3261255637
45.958289 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 35.185.195.2 unreachable - need to frag (mtu 1400)
45.991403 lan out 108.177.122.97.443 -> 192.168.1.168.63104: fin 469272495 ack 2366443600
46.156941 lan out 13.107.213.41.443 -> 192.168.1.168.62648: fin 3482954680 ack 3133788354
46.162130 lan in 192.168.1.168.62648 -> 13.107.213.41.443: fin 3133788354 ack 3482954681
47.388579 lan in 192.168.1.168.58677 -> 64.233.176.95.443: udp 1250
47.388673 lan in 192.168.1.168.58677 -> 64.233.176.95.443: udp 1250
47.388705 lan in 192.168.1.168.58677 -> 64.233.176.95.443: udp 1250
47.388724 lan in 192.168.1.168.58677 -> 64.233.176.95.443: udp 76
47.640155 lan out 64.233.176.95.443 -> 192.168.1.168.58677: udp 40
47.640183 lan out 64.233.176.95.443 -> 192.168.1.168.58677: udp 40
48.823456 lan in 192.168.1.168.57325 -> 142.250.9.94.443: udp 1250
48.823526 lan in 192.168.1.168.57325 -> 142.250.9.94.443: udp 1250
48.823547 lan in 192.168.1.168.53556 -> 172.217.215.104.443: udp 1250
48.823600 lan in 192.168.1.168.53556 -> 172.217.215.104.443: udp 1250
48.829723 lan in 192.168.1.168.56471 -> 10.110.96.33.53: udp 38
48.838653 lan in 192.168.1.168.59146 -> 108.177.122.97.443: udp 1250
48.838701 lan in 192.168.1.168.59146 -> 108.177.122.97.443: udp 1250
48.838724 lan in 192.168.1.168.59146 -> 108.177.122.97.443: udp 1250
48.838743 lan in 192.168.1.168.59146 -> 108.177.122.97.443: udp 78
48.915554 lan in 192.168.1.168.59305 -> 10.110.96.33.53: udp 44
48.931556 lan in 192.168.1.168.52818 -> 10.110.96.33.53: udp 36
48.988003 lan in 192.168.1.168.49885 -> 172.253.124.157.443: udp 1250
48.988083 lan in 192.168.1.168.49885 -> 172.253.124.157.443: udp 1250
48.988116 lan in 192.168.1.168.49885 -> 172.253.124.157.443: udp 79
48.988136 lan in 192.168.1.168.49885 -> 172.253.124.157.443: udp 980
49.008146 lan in 192.168.1.168.64946 -> 34.8.38.243.443: udp 1250
49.008203 lan in 192.168.1.168.64946 -> 34.8.38.243.443: udp 1250
49.009731 lan out 34.8.38.243.443 -> 192.168.1.168.64946: udp 40
49.010223 lan out 34.8.38.243.443 -> 192.168.1.168.64946: udp 1250
49.073156 lan out 142.250.9.94.443 -> 192.168.1.168.57325: udp 40
49.073853 lan out 142.250.9.94.443 -> 192.168.1.168.57325: udp 1250
49.073875 lan out 142.250.9.94.443 -> 192.168.1.168.57325: udp 1250
49.074787 lan out 172.217.215.104.443 -> 192.168.1.168.53556: udp 40
49.074813 lan out 172.217.215.104.443 -> 192.168.1.168.53556: udp 42
49.088803 lan out 108.177.122.97.443 -> 192.168.1.168.59146: udp 40
49.088829 lan out 108.177.122.97.443 -> 192.168.1.168.59146: udp 40
49.147904 lan in 192.168.1.168.61966 -> 108.177.122.97.443: udp 1250
49.147988 lan in 192.168.1.168.61966 -> 108.177.122.97.443: udp 1250
49.148014 lan in 192.168.1.168.61966 -> 108.177.122.97.443: udp 82
49.148033 lan in 192.168.1.168.61966 -> 108.177.122.97.443: udp 453
49.152590 lan in 192.168.1.168.60904 -> 74.125.21.138.443: udp 1250
49.152649 lan in 192.168.1.168.60904 -> 74.125.21.138.443: udp 1250
49.152672 lan in 192.168.1.168.60904 -> 74.125.21.138.443: udp 78
49.235713 lan out 172.253.124.157.443 -> 192.168.1.168.49885: udp 40
49.235972 lan out 172.253.124.157.443 -> 192.168.1.168.49885: udp 1250
49.272202 lan in 192.168.1.168.52818 -> 10.110.96.34.53: udp 36
49.401089 lan out 108.177.122.97.443 -> 192.168.1.168.61966: udp 40
49.401602 lan out 108.177.122.97.443 -> 192.168.1.168.61966: udp 1250
49.405604 lan out 74.125.21.138.443 -> 192.168.1.168.60904: udp 40
49.405841 lan out 74.125.21.138.443 -> 192.168.1.168.60904: udp 1250
50.293145 lan in 192.168.1.168.52818 -> 8.8.8.8.53: udp 36
50.312666 lan out 8.8.8.8.53 -> 192.168.1.168.52818: udp 100
54.162288 lan out 20.189.173.17.443 -> 192.168.1.168.56861: rst 1767774955 ack 2526128363
55.932537 lan in 192.168.1.168.56436 -> 10.110.96.33.53: udp 66
56.070850 lan in 192.168.1.168.54144 -> 52.239.207.225.443: fin 449872842 ack 659513213
56.070850 lan in 192.168.1.168.64043 -> 52.239.207.225.443: fin 2264518289 ack 403436014
56.070854 lan in 192.168.1.168.57836 -> 40.126.29.14.443: fin 1021721526 ack 3567918716
56.070880 lan in 192.168.1.168.57270 -> 74.125.21.157.443: fin 2281957525 ack 95274621
56.288089 lan out 52.239.207.225.443 -> 192.168.1.168.64043: rst 403436014 ack 2264518290
56.289255 lan out 52.239.207.225.443 -> 192.168.1.168.54144: rst 659513213 ack 449872843
56.302433 lan out 40.126.29.14.443 -> 192.168.1.168.57836: rst 3567918716 ack 1021721527
56.319081 lan out 74.125.21.157.443 -> 192.168.1.168.57270: fin 95274621 ack 2281957526
57.049032 lan in 192.168.1.168.52403 -> 10.110.96.33.53: udp 38
59.455931 lan in 192.168.1.168.52168 -> 64.233.176.95.443: fin 2273800188 ack 942413189
59.703863 lan out 64.233.176.95.443 -> 192.168.1.168.52168: fin 942413189 ack 2273800189
60.960601 lan in 192.168.1.168.58980 -> 10.110.96.33.53: udp 57
61.236482 lan in 192.168.1.168.51510 -> 34.98.77.231.443: syn 2850104453
61.238123 lan out 34.98.77.231.443 -> 192.168.1.168.51510: syn 2036528229 ack 2850104454
61.266548 lan in 192.168.1.168.51510 -> 34.98.77.231.443: ack 2036528230
61.323016 lan in 192.168.1.168.51510 -> 34.98.77.231.443: 2850105568 ack 2036532758
61.323076 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.98.77.231 unreachable - need to frag (mtu 1400)
61.805418 lan out 34.98.77.231.443 -> 192.168.1.168.51510: psh fin 2036567071 ack 2850108072
61.835190 lan in 192.168.1.168.51510 -> 34.98.77.231.443: fin 2850108096 ack 2036567535
61.836522 lan out 34.98.77.231.443 -> 192.168.1.168.51510: rst 2036567535
61.836574 lan out 34.98.77.231.443 -> 192.168.1.168.51510: rst 2036567535
62.536226 lan in 192.168.1.168.64410 -> 10.110.96.33.53: udp 32
62.805080 lan in 192.168.1.168.64410 -> 8.8.8.8.53: udp 32
62.829550 lan out 8.8.8.8.53 -> 192.168.1.168.64410: udp 204
64.750270 lan in 192.168.1.168.50518 -> 10.110.96.33.53: udp 37
64.750271 lan in 192.168.1.168.63097 -> 10.110.96.33.53: udp 36
65.101399 lan in 192.168.1.168.50518 -> 10.110.96.34.53: udp 37
65.101489 lan in 192.168.1.168.63097 -> 10.110.96.34.53: udp 36
66.073713 lan in 192.168.1.168.64521 -> 52.123.128.14.443: syn 2954180792
66.075792 lan out 52.123.128.14.443 -> 192.168.1.168.64521: syn 99888823 ack 2954180793
66.078577 lan in 192.168.1.168.64521 -> 52.123.128.14.443: ack 99888824
66.113856 lan in 192.168.1.168.63097 -> 8.8.8.8.53: udp 36
66.133685 lan out 8.8.8.8.53 -> 192.168.1.168.63097: udp 100
66.249423 lan out arp who-has 192.168.1.168 tell 192.168.1.10
66.251895 lan in arp reply 192.168.1.168 is-at 04:56:e5:b2:df:bd
75.987289 lan in 192.168.1.168.60539 -> 10.110.96.33.53: udp 43
75.987290 lan in 192.168.1.168.56540 -> 10.110.96.33.53: udp 57
75.987290 lan in 192.168.1.168.62082 -> 52.239.207.225.443: fin 1907210895 ack 1064981717
76.209152 lan out 52.239.207.225.443 -> 192.168.1.168.62082: fin 1064982243 ack 1907210896
76.266098 lan in 192.168.1.168.62082 -> 52.239.207.225.443: rst 1907210896 ack 1064982243
76.370655 lan out 52.203.25.223.443 -> 192.168.1.168.65487: fin 2606512866 ack 2659833773
76.393255 lan in 192.168.1.168.65487 -> 52.203.25.223.443: fin 2659834304 ack 2606512866
76.478047 lan out 52.203.25.223.443 -> 192.168.1.168.65487: rst 2606512842
76.605246 lan out 52.203.25.223.443 -> 192.168.1.168.65487: rst 2606512866
76.605275 lan out 52.203.25.223.443 -> 192.168.1.168.65487: rst 2606512867
76.605288 lan out 52.203.25.223.443 -> 192.168.1.168.65487: rst 2606512866
77.417933 lan in 192.168.1.168.49996 -> 10.110.96.33.53: udp 52
77.668328 lan in 192.168.1.168.50582 -> 34.236.161.191.443: syn 789157648
77.878559 lan out 34.236.161.191.443 -> 192.168.1.168.50582: syn 2493940964 ack 789157649
77.898441 lan in 192.168.1.168.50582 -> 34.236.161.191.443: ack 2493940965
80.943079 lan in 192.168.1.168.57580 -> 10.110.96.33.53: udp 52
81.198647 lan in 192.168.1.168.50583 -> 34.236.161.191.443: syn 3735203435
81.409470 lan out 34.236.161.191.443 -> 192.168.1.168.50583: syn 89724857 ack 3735203436
81.541672 lan in 192.168.1.168.50583 -> 34.236.161.191.443: ack 89724858
81.541735 lan in 192.168.1.168.50583 -> 34.236.161.191.443: psh 3735203436 ack 89724858
83.775395 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735204197 ack 89729265
83.775428 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735205649 ack 89729265
83.775475 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775490 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775524 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735207777 ack 89729265
83.775552 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775639 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735209229 ack 89729265
83.775668 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775676 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735210681 ack 89729265
83.775703 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775710 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735212543 ack 89729265
83.775734 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.775760 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735213995 ack 89729265
83.775786 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.779231 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735215447 ack 89729265
83.779251 lan in 192.168.1.168.50583 -> 34.236.161.191.443: 3735216899 ack 89729265
83.779277 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
83.779289 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 34.236.161.191 unreachable - need to frag (mtu 1400)
85.461799 lan out 13.107.246.41.443 -> 192.168.1.168.50885: fin 1846374796 ack 2408958310
85.465439 lan in 192.168.1.168.50885 -> 13.107.246.41.443: fin 2408958310 ack 1846374797
89.978547 lan in 192.168.1.168.50583 -> 34.236.161.191.443: fin 3735245960 ack 89730011
90.188223 lan out 34.236.161.191.443 -> 192.168.1.168.50583: fin 89730011 ack 3735245961
91.411333 lan in 192.168.1.168.65500 -> 23.63.157.6.443: fin 3067765184 ack 1893798795
91.411363 lan in 192.168.1.168.52255 -> 23.63.157.6.443: fin 2031788578 ack 827348572
91.656877 lan out 23.63.157.6.443 -> 192.168.1.168.52255: fin 827348603 ack 2031788579
91.659740 lan out 23.63.157.6.443 -> 192.168.1.168.65500: fin 1893798826 ack 3067765185
91.748779 lan in 192.168.1.168.52255 -> 23.63.157.6.443: rst 2031788579 ack 827348603
91.944210 lan in 192.168.1.168.65500 -> 23.63.157.6.443: fin 3067765184 ack 1893798795
92.243682 lan out 23.63.157.6.443 -> 192.168.1.168.65500: fin 1893798826 ack 3067765185
92.883676 lan out 23.63.157.6.443 -> 192.168.1.168.65500: psh fin 1893798795 ack 3067765185
92.894917 lan in 192.168.1.168.65500 -> 23.63.157.6.443: rst 3067765185 ack 1893798826
105.527028 lan in 192.168.1.168.60328 -> 208.104.29.221.443: psh 1183007802 ack 3689430193
105.527083 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 208.104.29.221 unreachable - need to frag (mtu 1400)
108.360919 lan in 192.168.1.168.50039 -> 10.110.96.33.53: udp 49
108.425074 lan in 192.168.1.168.54256 -> 108.177.122.97.443: udp 1250
108.425158 lan in 192.168.1.168.54256 -> 108.177.122.97.443: udp 1250
108.425186 lan in 192.168.1.168.54256 -> 108.177.122.97.443: udp 1250
108.425205 lan in 192.168.1.168.54256 -> 108.177.122.97.443: udp 80
108.584248 lan in 192.168.1.168.50827 -> 34.8.38.243.443: udp 1250
108.584327 lan in 192.168.1.168.50827 -> 34.8.38.243.443: udp 1250
108.585872 lan out 34.8.38.243.443 -> 192.168.1.168.50827: udp 40
108.586337 lan out 34.8.38.243.443 -> 192.168.1.168.50827: udp 1250
108.647982 lan in 192.168.1.168.50039 -> 10.110.96.34.53: udp 49
108.674598 lan out 108.177.122.97.443 -> 192.168.1.168.54256: udp 40
108.674631 lan out 108.177.122.97.443 -> 192.168.1.168.54256: udp 40
110.529418 lan out arp who-has 192.168.1.168 tell 192.168.1.10
110.562847 lan in arp reply 192.168.1.168 is-at 04:56:e5:b2:df:bd
119.833669 lan out 35.185.195.2.443 -> 192.168.1.168.49164: psh fin 3261627095 ack 4028344531
119.985678 lan in 192.168.1.168.49164 -> 35.185.195.2.443: rst 4028344531 ack 3261627120
123.661261 lan in 192.168.1.168.59850 -> 10.110.96.33.53: udp 36
123.750837 lan in 192.168.1.168.61717 -> 64.233.176.95.443: udp 1250
123.774953 lan in 192.168.1.168.61717 -> 64.233.176.95.443: udp 1250
123.774985 lan in 192.168.1.168.61717 -> 64.233.176.95.443: udp 1250
123.775005 lan in 192.168.1.168.61717 -> 64.233.176.95.443: udp 80
123.995802 lan out 64.233.176.95.443 -> 192.168.1.168.61717: udp 40
124.023449 lan out 64.233.176.95.443 -> 192.168.1.168.61717: udp 40
124.044088 lan in 192.168.1.168.59850 -> 10.110.96.34.53: udp 36
125.104748 lan in 192.168.1.168.59850 -> 8.8.8.8.53: udp 36
125.128153 lan out 8.8.8.8.53 -> 192.168.1.168.59850: udp 100
132.872194 lan in 192.168.1.168.60047 -> 10.110.96.33.53: udp 37
132.872200 lan in 192.168.1.168.52841 -> 10.110.96.33.53: udp 36
133.052372 lan in 192.168.1.168.60047 -> 8.8.8.8.53: udp 37
133.071608 lan out 8.8.8.8.53 -> 192.168.1.168.60047: udp 206
133.079176 lan in 192.168.1.168.65449 -> 13.107.213.41.443: syn 981506641
133.081040 lan out 13.107.213.41.443 -> 192.168.1.168.65449: syn 4123765769 ack 981506642
133.119403 lan in 192.168.1.168.65449 -> 13.107.213.41.443: ack 4123765770
133.119702 lan in 192.168.1.168.52841 -> 8.8.8.8.53: udp 36
133.146841 lan out 8.8.8.8.53 -> 192.168.1.168.52841: udp 100
134.849426 lan out arp who-has 192.168.1.168 tell 192.168.1.10
134.853441 lan in arp reply 192.168.1.168 is-at 04:56:e5:b2:df:bd
138.606387 lan out 34.236.161.191.443 -> 192.168.1.168.50582: fin 2493946527 ack 789159036
138.637081 lan in 192.168.1.168.50582 -> 34.236.161.191.443: fin 789159567 ack 2493946528
138.655536 lan out 34.236.161.191.443 -> 192.168.1.168.50582: rst 2493946503
138.846369 lan out 34.236.161.191.443 -> 192.168.1.168.50582: rst 2493946527
138.846408 lan out 34.236.161.191.443 -> 192.168.1.168.50582: rst 2493946528
138.846459 lan out 34.236.161.191.443 -> 192.168.1.168.50582: rst 2493946528
139.694702 lan in 192.168.1.168.53018 -> 10.110.96.33.53: udp 52
140.010405 lan in 192.168.1.168.61303 -> 54.144.111.231.443: syn 191770563
140.216236 lan out 54.144.111.231.443 -> 192.168.1.168.61303: syn 1141186223 ack 191770564
140.286402 lan in 192.168.1.168.61303 -> 54.144.111.231.443: ack 1141186224
140.286453 lan in 192.168.1.168.61303 -> 54.144.111.231.443: psh 191770564 ack 1141186224
140.513669 lan in 192.168.1.168.61304 -> 54.144.111.231.443: syn 1454259167
140.668784 lan in 192.168.1.168.54269 -> 35.185.195.2.443: syn 2178472448
140.726153 lan out 54.144.111.231.443 -> 192.168.1.168.61304: syn 227973991 ack 1454259168
140.728938 lan in 192.168.1.168.61304 -> 54.144.111.231.443: ack 227973992
140.865793 lan out 35.185.195.2.443 -> 192.168.1.168.54269: syn 2455525002 ack 2178472449
140.868311 lan in 192.168.1.168.54269 -> 35.185.195.2.443: ack 2455525003
140.966449 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454259929 ack 227978399
140.966488 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454261389 ack 227978399
140.966507 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454263509 ack 227978399
140.966524 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454264969 ack 227978399
140.966541 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454266429 ack 227978399
140.966558 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454268275 ack 227978399
140.966575 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454269735 ack 227978399
140.966592 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454271195 ack 227978399
140.966609 lan in 192.168.1.168.61304 -> 54.144.111.231.443: 1454272655 ack 227978399
140.966663 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966679 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966691 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966703 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966714 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966726 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966737 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966748 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
140.966759 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 54.144.111.231 unreachable - need to frag (mtu 1400)
141.208023 lan in 192.168.1.168.65498 -> 216.239.34.181.443: fin 3803679571 ack 2141411326
141.209586 lan out 216.239.34.181.443 -> 192.168.1.168.65498: fin 2141411326 ack 3803679572
142.215313 lan in 192.168.1.168.59996 -> 10.110.96.33.53: udp 32
142.215317 lan in 192.168.1.168.65433 -> 10.110.96.33.53: udp 38
142.244309 lan in 192.168.1.168.50144 -> 10.110.96.33.53: udp 42
142.300503 lan in 192.168.1.168.63976 -> 10.110.96.33.53: udp 44
142.398348 lan in 192.168.1.168.60404 -> 10.110.96.33.53: udp 45
142.452882 lan in 192.168.1.168.58045 -> 34.8.38.243.443: udp 1250
142.452970 lan in 192.168.1.168.58045 -> 34.8.38.243.443: udp 1250
142.453292 lan in 192.168.1.168.56935 -> 64.233.177.99.443: udp 1250
142.453367 lan in 192.168.1.168.56935 -> 64.233.177.99.443: udp 1250
142.453395 lan in 192.168.1.168.56935 -> 64.233.177.99.443: udp 1250
142.454527 lan out 34.8.38.243.443 -> 192.168.1.168.58045: udp 40
142.455003 lan out 34.8.38.243.443 -> 192.168.1.168.58045: udp 1250
142.502967 lan in 192.168.1.168.51960 -> 64.233.177.97.443: udp 1250
142.503045 lan in 192.168.1.168.51960 -> 64.233.177.97.443: udp 1250
142.503075 lan in 192.168.1.168.51960 -> 64.233.177.97.443: udp 81
142.541588 lan in 192.168.1.168.58293 -> 74.125.21.139.443: udp 1250
142.541655 lan in 192.168.1.168.58293 -> 74.125.21.139.443: udp 1250
142.541680 lan in 192.168.1.168.58293 -> 74.125.21.139.443: udp 82
142.667768 lan in 192.168.1.168.64142 -> 74.125.138.156.443: udp 1250
142.667847 lan in 192.168.1.168.64142 -> 74.125.138.156.443: udp 1250
142.667874 lan in 192.168.1.168.64142 -> 74.125.138.156.443: udp 1250
142.667893 lan in 192.168.1.168.64142 -> 74.125.138.156.443: udp 81
142.699938 lan out 64.233.177.99.443 -> 192.168.1.168.56935: udp 40
142.699971 lan out 64.233.177.99.443 -> 192.168.1.168.56935: udp 40
142.750235 lan out 64.233.177.97.443 -> 192.168.1.168.51960: udp 40
142.750561 lan out 64.233.177.97.443 -> 192.168.1.168.51960: udp 1250
142.791438 lan out 74.125.21.139.443 -> 192.168.1.168.58293: udp 40
142.791763 lan out 74.125.21.139.443 -> 192.168.1.168.58293: udp 1250
142.911233 lan out 74.125.138.156.443 -> 192.168.1.168.64142: udp 40
142.911261 lan out 74.125.138.156.443 -> 192.168.1.168.64142: udp 40
143.185369 lan in 192.168.1.168.58432 -> 142.251.15.94.443: udp 1250
143.185468 lan in 192.168.1.168.58432 -> 142.251.15.94.443: udp 1250
143.185500 lan in 192.168.1.168.58432 -> 142.251.15.94.443: udp 79
143.185520 lan in 192.168.1.168.58432 -> 142.251.15.94.443: udp 1162
143.185538 lan in 192.168.1.168.58432 -> 142.251.15.94.443: udp 790
143.439322 lan out 142.251.15.94.443 -> 192.168.1.168.58432: udp 40
143.439543 lan out 142.251.15.94.443 -> 192.168.1.168.58432: udp 1250
145.018922 lan out 20.1.248.118.443 -> 192.168.1.168.65489: rst 443416398 ack 309685837
145.142444 lan out 20.1.248.118.443 -> 192.168.1.168.65488: rst 1406360947 ack 3304246353
146.957235 lan in 192.168.1.168.61304 -> 54.144.111.231.443: fin 1454291047 ack 227979110
147.168491 lan out 54.144.111.231.443 -> 192.168.1.168.61304: fin 227979110 ack 1454291048
150.330106 lan in 192.168.1.168.52244 -> 10.110.96.33.53: udp 38
160.270175 lan in 192.168.1.168.50662 -> 10.110.96.33.53: udp 35
161.380920 lan in 192.168.1.168.59020 -> 10.110.96.33.53: udp 66
162.929652 lan in 192.168.1.168.64687 -> 10.110.96.33.53: udp 57
162.929653 lan in 192.168.1.168.61400 -> 10.110.96.33.53: udp 43
167.397889 lan out 13.89.179.10.443 -> 192.168.1.168.59103: rst 2811106430 ack 2455397826
172.399424 lan out arp who-has 192.168.1.168 tell 192.168.1.10
172.462171 lan in arp reply 192.168.1.168 is-at 04:56:e5:b2:df:bd
177.636116 lan in 192.168.1.168.60303 -> 10.110.96.33.53: udp 36
177.636117 lan in 192.168.1.168.58357 -> 10.110.96.33.53: udp 36
177.912405 lan in 192.168.1.168.63813 -> 150.171.27.11.443: syn 60415684
177.914476 lan out 150.171.27.11.443 -> 192.168.1.168.63813: syn 3013436567 ack 60415685
177.946474 lan in 192.168.1.168.63813 -> 150.171.27.11.443: ack 3013436568
177.946536 lan in 192.168.1.168.63813 -> 150.171.27.11.443: 60415685 ack 3013436568
177.946584 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 150.171.27.11 unreachable - need to frag (mtu 1400)
178.094150 lan in 192.168.1.168.60303 -> 10.110.96.34.53: udp 36
179.022911 lan in 192.168.1.168.60303 -> 8.8.8.8.53: udp 36
179.041831 lan out 8.8.8.8.53 -> 192.168.1.168.60303: udp 100
180.193655 lan out 52.239.207.225.443 -> 192.168.1.168.65331: rst 1156631378 ack 2749266398
187.163688 lan in 192.168.1.168.59861 -> 35.201.112.186.443: fin 2783561629 ack 3580272507
187.163717 lan in 192.168.1.168.64450 -> 172.217.215.104.443: fin 2550959460 ack 2371142703
187.163733 lan in 192.168.1.168.49672 -> 64.233.176.95.443: fin 675401714 ack 592514634
187.163757 lan in 192.168.1.168.61654 -> 13.107.213.41.443: fin 2979604764 ack 2414183365
187.163779 lan in 192.168.1.168.65372 -> 108.177.122.97.443: fin 280561673 ack 2715141415
187.163801 lan in 192.168.1.168.53343 -> 108.177.122.97.443: fin 2764195569 ack 1626419419
187.163823 lan in 192.168.1.168.55348 -> 136.146.45.8.443: fin 1563231968 ack 2799899162
187.163845 lan in 192.168.1.168.64946 -> 142.251.15.94.443: fin 3327277757 ack 3749137812
187.163919 lan in 192.168.1.168.52553 -> 108.138.64.36.443: fin 2572949051 ack 4183675941
187.163943 lan in 192.168.1.168.57363 -> 3.167.69.97.443: fin 4237249819 ack 193111792
187.163968 lan in 192.168.1.168.57736 -> 172.217.215.104.443: fin 3355202887 ack 3658432112
187.163996 lan in 192.168.1.168.64158 -> 108.177.122.97.443: fin 1691289528 ack 4241692384
187.164017 lan in 192.168.1.168.63158 -> 136.146.45.8.443: fin 177549812 ack 2684703879
187.164099 lan in 192.168.1.168.56252 -> 64.233.176.95.443: fin 817879402 ack 1657449508
187.165380 lan out 35.201.112.186.443 -> 192.168.1.168.59861: fin 3580272507 ack 2783561630
187.165647 lan out 13.107.213.41.443 -> 192.168.1.168.61654: fin 2414183365 ack 2979604765
187.193554 lan in 192.168.1.168.51381 -> 13.107.213.41.443: fin 2120143213 ack 1635041010
187.193555 lan in 192.168.1.168.52278 -> 172.253.124.157.443: fin 3706821491 ack 656537857
187.193577 lan in 192.168.1.168.63524 -> 142.250.9.94.443: fin 3812171189 ack 1665200435
187.193592 lan in 192.168.1.168.53263 -> 172.67.71.37.443: fin 962769876 ack 3258417898
187.193657 lan in 192.168.1.168.52570 -> 155.226.128.158.443: fin 1487182130 ack 1343156679
187.193682 lan in 192.168.1.168.57704 -> 34.8.38.243.443: fin 2918793790 ack 1604193819
187.193694 lan in 192.168.1.168.54755 -> 74.125.21.157.443: fin 653358973 ack 3976609
187.193712 lan in 192.168.1.168.54269 -> 35.185.195.2.443: fin 2178476013 ack 2455542937
187.195422 lan out 13.107.213.41.443 -> 192.168.1.168.51381: fin 1635041010 ack 2120143214
187.195524 lan out 34.8.38.243.443 -> 192.168.1.168.57704: fin 1604193819 ack 2918793791
187.196342 lan out 172.67.71.37.443 -> 192.168.1.168.53263: fin 3258417898 ack 962769877
187.369047 lan out 136.146.45.8.443 -> 192.168.1.168.63158: fin 2684703903 ack 177549813
187.369096 lan out 136.146.45.8.443 -> 192.168.1.168.55348: fin 2799899186 ack 1563231969
187.369753 lan in 192.168.1.168.53029 -> 64.233.185.188.5228: fin 1863407511 ack 2553545144
187.379699 lan out 3.167.69.97.443 -> 192.168.1.168.57363: fin 193111792 ack 4237249820
187.383833 lan out 108.138.64.36.443 -> 192.168.1.168.52553: fin 4183675941 ack 2572949052
187.388459 lan out 35.185.195.2.443 -> 192.168.1.168.54269: fin 2455542937 ack 2178476014
187.403420 lan out 108.177.122.97.443 -> 192.168.1.168.64158: fin 4241692384 ack 1691289529
187.403887 lan out 108.177.122.97.443 -> 192.168.1.168.53343: fin 1626419419 ack 2764195570
187.404234 lan out 64.233.176.95.443 -> 192.168.1.168.56252: fin 1657449508 ack 817879403
187.404235 lan in 192.168.1.168.61752 -> 74.125.21.139.443: fin 3495517465 ack 3631268135
187.404303 lan in 192.168.1.168.61042 -> 108.177.122.84.443: fin 1135864228 ack 2588136218
187.404326 lan in 192.168.1.168.56207 -> 172.217.215.104.443: fin 112853126 ack 3013824537
187.404353 lan in 192.168.1.168.52285 -> 74.125.21.139.443: fin 491459464 ack 3087337068
187.404367 lan in 192.168.1.168.63158 -> 136.146.45.8.443: rst 177549813 ack 2684703903
187.404387 lan in 192.168.1.168.55348 -> 136.146.45.8.443: rst 1563231969 ack 2799899186
187.410495 lan out 172.217.215.104.443 -> 192.168.1.168.57736: fin 3658432112 ack 3355202888
187.414940 lan out 108.177.122.97.443 -> 192.168.1.168.65372: fin 2715141415 ack 280561674
187.415957 lan out 142.251.15.94.443 -> 192.168.1.168.64946: fin 3749137812 ack 3327277758
187.417387 lan out 172.217.215.104.443 -> 192.168.1.168.64450: fin 2371142703 ack 2550959461
187.417778 lan out 64.233.176.95.443 -> 192.168.1.168.49672: fin 592514634 ack 675401715
187.430223 lan out 155.226.128.158.443 -> 192.168.1.168.52570: fin 1343156703 ack 1487182131
187.435375 lan out 172.253.124.157.443 -> 192.168.1.168.52278: fin 656537857 ack 3706821492
187.444749 lan out 142.250.9.94.443 -> 192.168.1.168.63524: fin 1665200435 ack 3812171190
187.445094 lan out 74.125.21.157.443 -> 192.168.1.168.54755: fin 3976609 ack 653358974
187.452196 lan in 192.168.1.168.52570 -> 155.226.128.158.443: rst 1487182131 ack 1343156703
187.652787 lan out 74.125.21.139.443 -> 192.168.1.168.52285: fin 3087337068 ack 491459465
187.655755 lan out 108.177.122.84.443 -> 192.168.1.168.61042: fin 2588136218 ack 1135864229
187.656936 lan out 74.125.21.139.443 -> 192.168.1.168.61752: fin 3631268135 ack 3495517466
187.657492 lan out 172.217.215.104.443 -> 192.168.1.168.56207: fin 3013824537 ack 112853127
189.955864 lan in 192.168.1.168.60623 -> 10.110.96.33.53: udp 50
190.208670 lan in 192.168.1.168.63814 -> 51.104.15.252.443: syn 360503312
190.344178 lan out 51.104.15.252.443 -> 192.168.1.168.63814: syn 2156958891 ack 360503313
190.375470 lan in 192.168.1.168.63814 -> 51.104.15.252.443: ack 2156958892
190.427712 lan in 192.168.1.168.63814 -> 51.104.15.252.443: 360503313 ack 2156958892
190.427772 lan out Wan IP address ( gateway) -> 192.168.1.168: icmp: 51.104.15.252 unreachable - need to frag (mtu 1400)
191.487409 lan out 52.123.128.14.443 -> 192.168.1.168.64521: rst 99898445 ack 2954188820
192.021476 lan in 192.168.1.168.60953 -> 10.110.96.33.53: udp 42
192.251118 lan in 192.168.1.168.60953 -> 8.8.8.8.53: udp 42
192.252751 lan out 8.8.8.8.53 -> 192.168.1.168.60953: udp 58
192.325756 lan in 192.168.1.168.63815 -> 216.239.32.178.443: syn 1713052269
192.331392 lan out 216.239.32.178.443 -> 192.168.1.168.63815: syn 1815895142 ack 1713052270
192.355664 lan in 192.168.1.168.63815 -> 216.239.32.178.443: ack 1815895143
192.995700 lan in 192.168.1.168.63815 -> 216.239.32.178.443: fin 1713053553 ack 1815899938
192.998258 lan out 216.239.32.178.443 -> 192.168.1.168.63815: fin 1815899938 ack 1713053554

prince
princeAuthor
New Member
January 11, 2026

can anyone help

AEK
SuperUser
AEK
SuperUser
January 11, 2026

Hi Prince

The output you shared is sniffer log and doesn't show if the traffic has been allowed or denied.

Try check the traffic log instead, under Log > Traffic Log, and use filters. But first you will need to enable traffic logs in the related policy and in the implicit deny policy as well.

AEK
vpolovnikov
Staff & Editor
vpolovnikov
Staff & Editor
January 14, 2026

Hello Prince,

 

Could you share a bit more about what the script does? I'm guessing there's a sort of network operation that's supposed to be made and fails due to connectivity issue as the only difference as you have pointed out is the network (firewall policy or inspection settings?). I highly doubt FortiClient is a concern here as its job is to start the script, and the rest is on the endpoint/script. Unfortunately, FortiClient doesn't provide any logging on whether the script was successful or where exactly execution failed.

Terms & ConditionsAccessibility statement