Skip to main content
leon84
leon84
New Member
July 28, 2015
Question

SNAT for fortigate self-originated traffic

  • July 28, 2015
  • 2 replies
  • 5912 views

Hi to all,

in wich way Can I set a source nat for fortigate self-originated traffic? All policy have an incoming and outcoming interface but the traffic originated by Fortigate itself haven't an incoming interface but only an outcoming interface. 

 

Thanks to all for the answer

2 replies

Sylvia
Sylvia
Explorer
July 28, 2015

depends on the fortigate traffic.

 

E.g. traffic to the FortiAnalyzer:

config log fortianalyzer setting

  set source-ip x.x.x.x

end

 

traffic to the FortiAnalyzer:

config system dns

  set source-ip x.x.x.x

end

 

Have a look into the CLI guide :)

leon84
leon84Author
New Member
July 28, 2015
I used source-ip option with Fortigate NTP connections. But is it the only way to do this one ? Thanks
leon84
leon84Author
New Member
July 28, 2015

Sorry for multiple answers but I think forum website has some problems with mobile navigation (iphone). I receive this error in Safari: isn't possible to open website because there are a lot of redirection. 

 

About my fortigate question I add: I used source-ip option but it permit to set only an ip address assigned to an interface. I would to have SNAT with any ip address. For this raison source-ip option is limited for me. 

Terms & ConditionsAccessibility statement