Skip to main content
jared8609
New Member
December 20, 2023
Question

viewing cameras remotely

  • December 20, 2023
  • 1 reply
  • 1408 views

I have a few old DVRs that still use port forwarding to access. I can see them all without any issues, on any device. But once I'm in my office, on the Fortigate 60 LAN I can't see any of them. Internet and everything appears to be working fine. I'm access them with ICMS software using a static I.P. and port 9000. Everything works if i don't use the LAN. I'm stumped on this.

1 reply

MGabriel
New Member
December 20, 2023

Hello Jared8609

 

The problem only occurs when you try to access cameras connected directly to the firewall, right?

Have you checked the logs > system events section in your firewall?

 

Make sure if you have any information when accessing the cameras in the firewall logs, such as blocking or even a lack of route/port released.

jared8609
jared8609Author
New Member
December 20, 2023

I forgot to mention the DVRs are at different locations with static I.P.s. So my issue is going from  PC>switch>fortigate>ISP~ISP>Router>DVR. Couldn't find anything in the logs

adimailig
Staff & Editor
Staff & Editor
December 20, 2023

I strongly suggest to check debug and traffic flow as well as packet capture to see if there is any blocking on Fortigate.

Reference : https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connectivity/ta-p/192560

diag sniffer packet any "host X.X.X.X and port 9000" 6 0 a

diag debug reset
diag debug disable
diag debug flow filter clear
diag debug flow filter addr X.X.X.X
diag debug flow filter port 9000
diag debug flow show iprope enable
diag debug flow show function enable
diag debug flow trace start 999
diag debug enable

Also, on firewall policy enable logging for all session (Log Allowed Traffic = Enable/All Sessions) and then check Forward Traffic Logs (Log & Report > Forward Traffic) if there is any blocked/denied traffic.

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/476970/logging-fortigate-traffic-and-using-fortiview#:~:text=2.-,Enabling%20logging%20in%20security%20policies,-Go%20to%20Policy