Can't Access Management through IPsec

[AbdelAziz-Maysara]

I have IPsec setup between the data center firewall and a remote site firewall .

I can access via ssh & telnet also ping is working but http(s) is not working.

the connection is through the wan link and MGMT interface in a lan 1 interface.

FortiGate 

[abarushka]

Hello,

I would recommend to collect debug flow and traffic sniffer while trying accessing management interface and check for anomalies:

sniffer:

diagnose sniffer packet any 'host <source IP address>' 6 0 a

debug flow:

diagnose debug flow filter saddr <source IP address>
diagnose debug flow show function-name enable
diagnose debug flow trace start 10
diagnose debug enable