Skip to main content
iharahap_genedx
New Member
March 2, 2026
Question

Team Meeting failed because of Forticlient injecting Team network to be routed over vpn tunnel

  • March 2, 2026
  • 2 replies
  • 307 views

these 2 microsoft team network are injected into mac route table to be sent over  vpn tunnel and when it does this, user fails to join the meeting (see attached screenshot). Our vpn set up is ssl vpn and with split tunnel based on firewall policy destination with FQDN route injection
Below are those network:


netstatnr.png


Below are microsoft team network on netstat -nr above
52.112.127.222

Query name (QNAME):

  • api.flightproxy.teams.microsoft.com

Answer (A record) name (RRNAME):

  • epx-enterpriseproxy.d03-058.ic3-calling-enterpriseproxy.01-eastus-prod.cosmic.office.net

Returned IP

  • 52.112.127.222

 

52.112.23.78

Query name (QNAME):

  • epx.usea-03.ic3-calling-enterpriseproxy.eastus-prod.cosmic.office.net

Answer (A record) name (RRNAME):

  • epx-enterpriseproxy-1.d03-058.ic3-calling-enterpriseproxy.01-eastus-prod.cosmic.office.net

Returned IP:

  • 52.112.23.78

It appears so far only mac user having this issue . The issue  is reproducible  easily. 
We  run through diagnose firewall fqdn list-all and the injected IP is not a part of it. So We really suspect the issue most likely triggered by forticlient software . I use the latest 7.4.3. forticlient on mac OS Sequoia version 15.7.4 and having this issue

Thank you for your assistance

2 replies

Jean-Philippe_P
Staff & Editor
Staff & Editor
March 5, 2026

Hello iharahap_genedx, 

 

Thank you for using the Community Forum. I will seek to get you an answer or help. We will reply to this thread with an update as soon as possible. 

Jean-Philippe - Fortinet Community Team
AEK
SuperUser
SuperUser
March 5, 2026

Is there a firewall policy on your FG that allows traffic from VPN tunnel to MS Teams?

AEK
Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT