VPN traffic blocked by implicit deny

Forum|Forum|2 years ago
January 10, 2024
5 replies
3139 views

Hi guys! Here is a issue with Fortigate200F(7.4.1) - ipsec vpn lpdap users randomly cant get access(cant even ping) to various internal sources after establishing connection cause of sudden implicit deny, locally created users have no such problem at all though. They both are in the same group, under same policy. Its strange how that rule doesnt work for AD users sometimes. Any guesses?

FortiClient

AEK

SuperUser

Hi

Does the related policy use FSSO as source?

I guess the blocked traffic shows IP without user, right?

AEK

ZoxanAuthor

New Member

@AEK wrote:
Hi
Does the related policy use FSSO as source?
I guess the blocked traffic shows IP without user, right?

The policy contains VPN ip range and group of imported ldap users with local users as source. Blocked traffic shows Source/Source Country/Region/Source Interface/Device ID/User in details, when Accepted - same with addition of Source NAT IP/Source NAT Port and Group