IPSec bet. 70D & Juniper SSG5

[TakeTsuj]

I have configured IPSec VPN between Fortigate 70D (FortiOS 5.4) & Juniper SSG5. 
The VPN itself is up and I can access remote site from SSG5 side without any problem.
However, from Fortigate side LAN, I cannot access to the other end (SSG side LAN).

I checked the traffic coming into our SSG5, BUT for some reasons, the traffic coming
from Fortigate side is NATted to WAN1 interface address. So, of course, the traffic
drops at SSG side.

I am trying to fix this issue tho, I am quite new with Fortigate. If you have any thoughts,
that would be very helpful!

Thank you very much in advance!

Tak

[IvanLin1]

I would assume that you are using the default route base VPN. Since the VPN connection is up, i will ignore this point and just check below and see if helps

can you check following:

1) confirm if you have set the correct routes to pass thru the ipsec tunnel

2) set the correct firewall policies and do not enable nat on this

regards

Ivan

[TakeTsuj · Accepted solution]

Hi Ivan,

Thank you very much for your kind reply.

I actually tried that before tho, it did not work.
However, I deleted the policy and recreated it, now it is working.
I created the policy (NAT was enabled) and disabled NAT after all,
it didn't work. So, I deleted it and recreated it. For some reasons,
FG70D did not disable it...

Anyway, now it is working!

Thanks,

Tak