Site to Site IP Sec VPN - Pinging in Fortigate CLI but not in Local and remote user

Hi ,

please verify below points 

1. firewall policy is in place ( VPN to LAN and vice versa)

2. any policy route configured for internet routing ?

collect the below output from CLI.

diag sniffer packet any 'src host x.x.x.x and dst host y.y.y.y' 4 0

replace x.x.x.x with local system ip and y.y.y.y with remote system ip.

Regards

Mahesh

Hi Paul, 

Please try to run the below command to check the flow filter logs 

di de flow filter saddr x.x.x.x
di de flow filter daddr y.y.y.y
di de flow filter proto 1
di de flow show function-name
di de flow show iprope enable
di de flow trace start 1000
di de en 

The iprope command will let us know which policy the traffic is hitting. First we would need to verify if the traffic is hitting the correct policy 

After running the command, try to initiate a ping from the Test pc. Check the logs see if the firewall is allowing the connection 

Regards
Vishal P