User able to ping but unable to access web server or rdp server

vlan 20 (user) unable access web server or rdp vlan 200 (server)

vlan 20 - 192.168.20.1 interface in core switch and vlan 200 - 192.168.200.1 interface in fortigate

fortigate internal ip vlan 172 - 192.168.172.2