Connect FortiGate with FortiAnalyzer over IPSEC VPN

Forum|Forum|8 years ago
November 10, 2017
1 reply
10585 views

Hello,

i want to connect a FortiGate 101E in the "Branch Office" over a VPN-Tunnel with the Fortianalyzer in the "Main Office"

I set over cli the "source-ip" to WAN-IP-Adress, but i can't still connect to the FortiAnalyzer.

I also added a static route to the FortiAnalyzer IP-Address over the VPN-Tunnel Interface.

The incoming and outgoing Policy allows "all".

Over CLI i can't Ping the FortiAnalyzer IP.

But i can ping other IPs in the same subnet.

Does anyone have an idea, why it doesn't work`?

If you need some more information, please ask.

Kind regards

Tobias

tanr

New Member

If you're connecting over a vpn tunnel, why are you setting the source-ip to the wan ip? It should be the lan ip of the fortigate, which the fortianalyzer should be expecting. This is assuming you're connecting to the lan IP of the FAZ through the VPN.

config log fortianalyzer setting set source-ip <FortiGate Internal IP> You'll need to have your routes and security policies defined to allow this. The security policies, since they are going lan to lan through the VPN, should not use NAT.

Sign up

Login with SSO

Login to the community

Login with SSO