New Member

Question

VPN Remote Access - not smb

Forum|Forum|5 years ago
January 4, 2021
8 replies
7493 views

Hi I new here.

Fortigate 900D, 6.2.6

SSL VPN login ok.

Non ping to internal servers.

If I try to \\172.16.xx.xx\ciao\miao from my client is not possible to view the share on the server.

In Policy and Object > Ipv4 policy I set "service" to ALL

Thanks

Toshi_Esumi

SuperUser

Can users ping the server IP?

puzzopiAuthor

New Member

The users cannot ping the servers but can go on the server via RDP:

- We cannot ping windows server from remote in vpn. The same servers are "pingable" on the lan.

- We can ping linux servers from remote in vpn and obviously on the lan.

Thank you in advance.

ede_pfau

SuperUser

I suspect the Windows firewall (software) might be active on the Win servers. You need to be able to ping the servers, this is a must. No ping, no other services.

Are you using the Forticlient SSL VPN in tunnel mode, or in web mode?

puzzopiAuthor

New Member

Hi, thanks for your reply.

I think is tunnel mode, with forticlient set in SSL-VPN on 443 port.

the strange thing is that before with a cisco asa and a cisco vpn it worked. Nothing was done on the servers

ede_pfau

SuperUser

Then it's related to the config, not the servers.

I can assure you that one can obtain decent SMB throughput via SSL-VPN on a FGT.

For testing, the policy is 'plain vanilla', i.e. without any UTM profile?

Yurisk

SuperUser

If it is a tunnel mode VPN, start with checking the routing table of the PC after it connects to Fortigate VPN:

Win: cmd -> route print

Linux/Mac: netstat -rn

and make sure you see the server's networks listed to go via the Forticlient vpn adapter.

yurisk.info - all things Fortinet blog, no ads

Sign up

Login with SSO

Login to the community

Login with SSO