Description
This article describes the behavior of VIP configured with 'Any' interface.
Solution
When using VIPs configured with 'Any' interface, the default behavior for outgoing internal initiated traffic is to use the External IP address mentioned in the VIP configuration.
# config firewall vipdisable: Force only the source NAT mapped IP to the external IP for traffic egressing the external interface of the VIP.
edit <VIPname>
set nat-source-vip ?
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2023 Fortinet, Inc. All Rights Reserved.