New Member

Question

Problem accessing website

7 replies
1142 views
Translate All

I am having trouble accessing the website https://concesionarios.gpat.com.ar/webconcesionarios

I see that my two Fortinet 80F and 100F devices are automatically blocking me without any blocking filter. I tried creating a web filter and DNS filter to allow me to access the page, but it still won't let me in. That's why I need your help to see what options I can try to allow me to access the page mentioned above.

I'm attaching screenshots of the settings I've configured. If you need more information, I can provide it.

Thank you very much for your help.

Screenshots:

web concesionarios.jpg edit address.jpg dns filter.jpg edit webfilter.jpg edit policy 2.jpg edit policy1.jpg

AEK

SuperUser

In the same policy (ID 49), enable all traffic logs, enable also violation logs in the implicit deny policy (ID 0) then redo the test, then check the traffic logs to see why the traffic is blocked.

Translate

AEK

DecGestAuthor

New Member

I'll send you the log for policy ID 49.

log 3.jpg log 2.jpg log 1.jpg

Translate

dingjerry_FTNT

Staff

Hi @DecGest ,

If you did not have any UTM profile applied in the firewall policy, do not try to add Web Filter or DNS Filter profile to fix the issue.

According to the log message you provided, it is "TCP Reset from server", it is the server resetting the connection, not an FortiGate issue.

Translate

AEK

SuperUser

Here we can see the traffic is allowed but there is a TCP reset from Server side.

As per my experience the issue comes from server side.

Translate

AEK

DecGestAuthor

New Member

It's very strange, because when I try to connect from the Forti firewall network, I can't reach the destination, but when I access it from an external network, I can reach the destination. However, when I spoke to support at www.gpat.com.ar, they told me that it's a public access point with no restrictions...

It's VERY STRANGE what's happening.

Translate

AEK

SuperUser

As suggested by Jerry above, even if the issue is probably from server side, you can still try use firewall policy without UTM (security profiles), and share the result.

Translate

AEK

sokelno5

New Member

Okay. I get my internet through the office of the building I live in. I never interacted with an ISP. I simply paid a fee, bought my own router (a Netgear), plugged the ethernet cable into the port on my wall, and boom, I had internet.

Translate

Sign up

Login with SSO

Login to the community

Login with SSO