Telnet and Ping Blocked

hello,

and welcome to the forums.

Can you show us what you have done so far? Which steps have you taken?

Do you have access to the documentation, especially the "FortiOS Handbook", chapter "firewalling".

Now, apart from the technical obstacles, you will know that opening standard ports on your internet facing interface is not a good idea at all. Why don't you just create an IPsec tunnel to the other network and then whatever service you need securely?

I follow this guide:

http://docs-legacy.fortinet.com/cb/html/index.html#page/FOS_Cookbook/Firewall/cb-firewall-dnat3.html

With

I don't can access to external server and configuration of firewalles of those.

For this reason, it seems strange that I can do something .. But manager those servers tells me that I need to unlock something on my firewall. I created rules for both TCP and UDP ports on my firewall but they said that is not enough. I tried pinging their server but I did not respond.

Is it possible that my firewall block telnet to an external server?

Hmmm, I have re-read your first post. Please clarify: are you trying to connect to an external server which has a public IP address, on port 22 (ssh), 80 (http) or 443 (https)?

And you ping'ed that server and it did not respond?

Generally, you don't have to set up a port forward just to enable outgoing connections. That's why I'm confused...please help me.

Yes, you need a policy from 'internal' to 'wan', i.e. from your LAN's interface to the internet facing interface.

As addresses use 'all' in both places (source and destination).

As service use 'ALL' or 'ANY' whatever you have in the list.

Schedule is 'always'.

Then enable 'NAT'. This is most important.

Put this policy on top of all policies so that it will be matched first.

Test with pinging 8.8.8.8 from a host on your LAN. Then ping the external servers you are trying to reach.

If there is an answer you are good.

If not, it doesn't matter much.

Try to browse to the server with a browser (that is, use http or https on ports 80 or 443).

And then please post back.