Skip to main content
gary2017
New Member
December 14, 2017
Question

Hairpin broke on update from 5.4.5 to 5.4.6 ?

  • December 14, 2017
  • 1 reply
  • 2839 views

Hi,

I just updated our Fortigate 100D from 5.4.5 to 5.4.6 and for some reason the hairpin I had set up stopped working.  It was set to route from two (different) WiFi tunnels to an internal (lan) VIP with external wan2 interface.  I tried reconfiguring to the other hairpin method - also without success.

 

Any clues as to what I should look at to determine what's wrong?

 

Thanks,

Gary

    1 reply

    gary2017
    gary2017Author
    New Member
    January 9, 2018

    Thought I'd post the "resolution".

     

    After opening up a support ticket, and a rather lengthy debugging session with support, we were able to get this working again by a process of trial and error. We eventually disabled App Control on the inbound (wan) rule.  Both 5.4.6 and 5.4.7 seem to have the same problem.

     

    Hope this helps someone else,

    Gary

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT