Skip to main content
kaizhi_1023
kaizhi_1023
New Member
January 14, 2026
Question

Fortigate unable to view cctv in local network

  • January 14, 2026
  • 2 replies
  • 484 views

Hi, I wanted to ask is there any configuration to setup for internal network and ports for accessing the cctv?
Because I can view the cctv outside the local network (using mobile data or network outside the office) but I cannot view the cctv when im in the office using local network. Below is the VIPs I created, is there any other configurations need to be made? 

Screenshot 2026-01-14 104857.png

2 replies

TheyCallMe
TheyCallMe
New Member
January 14, 2026

Are your CCTV devices on a separate VLAN? You should be able to https directly to the IP of the CCTV (Camera). Do you have an NVR?

kaizhi_1023
kaizhi_1023Author
New Member
January 14, 2026

No, they are in the same vlan. Only one. I can go to https directly, but the footage unable to see it, same as when I check in my phone. 
Yes, I do have a NVR. Hikvision 

TheyCallMe
TheyCallMe
New Member
January 14, 2026

What message do you get when you goto it via https? Does anything load or do you get "This site cant be reached"

ChrisvT
ChrisvT
New Member
January 26, 2026

Good day, any news on this? New to Fortigate moved from Sonic wall, and we have the same problem. if the phone is on the local wifi can view/playback but on mobile data/external to internal no luck, I have opend the ports as listed to the IP of the NVR but nothing. The worst part is if you refresh the screen the icons update with the current picture the playback just fails when you tap it. love the zero trust but it doesn't seem to love me  

kaizhi_1023
kaizhi_1023Author
New Member
January 27, 2026

My client unable to view his CCTV when connecting to local wifi, but using external network(mobile data) is able to view. I have solved this issue, i created a virtual ip mapped from (public ip address from router:cctv port) , mapped to (cctv local ip address: cctv port). Then create two policies wan -> internal, includes the virtual ip, internal -> internal, includes the virtual ip. Then I'm able to get the bytes coming in. You can try from this direction

Terms & ConditionsAccessibility statement