ssl-web-deny

Forum|Forum|14 years ago
May 15, 2012
6 replies
6649 views

the firewall is fortigate 50b My topology is as follows... 1. Virtual vlan 500 (internal interface) 192.168.15.0/24 network 2. Virtual vlan 550 (internal interface) 192.168.20.0/24 network I gave the rules and policies to vlan 500 as vlan 550. When I try to ssh to any machine in vlan 500, I am successful. However, when I try to ssh a machine in vlan 550, I get ssl-web-deny and SSL web application blocked. BTW... I could ssh to any machine from vlan 500 to any machine on vlan550. Also, when sshing from ssl-web portal to vlan 500, the source ip is that of vlan 500' s gateway on fortige. I am not sure what I am missing. Any help is appreciated.

rwpatterson

New Member

What are you policies as far as SSL-VPN -> VLAN?

Roman_GelfandAuthor

New Member

Thanks for the help. edit 15 set srcintf " wan2" set dstintf " VOIP" set srcaddr " ALL" set dstaddr " VOIP Lan" set action ssl-vpn set identity-based enable config identity-based-policy edit 1 set schedule " always" set groups " admin_SSL" set service " ANY" next end next

rwpatterson

New Member

Well, is ' VOIP' interface VLAN 500 or VLAN 550 (or both)? Does " VOIP Lan" contain both subnets?

Roman_GelfandAuthor

New Member

ORIGINAL: rwpatterson Well, is ' VOIP' interface VLAN 500 or VLAN 550 (or both)? Does " VOIP Lan" contain both subnets?

This is only VLAN 550 and VOIP lan is only VLAN 550 subnet. I have the same policy preceeding it except there it is VLAN 500 and virtual interface DATA. Thanks