Technical Tip: Syslog traffic with Source NAT going through IPsec Tunnel

[xiaoj]

Description	This article describes how to configure source NAT in FortiGate A for Syslog traffic that needs to go through the IPsec tunnel to reach the Syslog server behind FortiGate B.
Scope	Network setup:
Solution	The site-to-site tunnel is up and running between 'Fortigate_A' and 'Fortigate_B'. The traffic between 192.168.100.0/24 and 10.220.8.0/24 is allowed to go through the IPsec tunnel. The IP pool, 192.168.100.1-192.168.100.254, has been created for local LAN traffic source NAT. For the Syslog traffic, configure a loopback interface with the source NAT pool's IP. The lookback interface IP is used as the syslog source IP. The Syslog traffic is permitted by the phase 2 selector and forwarded to the Syslog server at the remote site.