Connect FortiGate with FortiAnalyzer over IPSEC VPN

[TobiasHan]

Hello,

i want to connect a FortiGate 101E in the "Branch Office" over a VPN-Tunnel with the Fortianalyzer in the "Main Office"

I set over cli the "source-ip" to WAN-IP-Adress, but i can't still connect to the FortiAnalyzer.

I also added a static route to the FortiAnalyzer IP-Address over the VPN-Tunnel Interface.

The incoming and outgoing Policy allows "all".

Over CLI i can't Ping the FortiAnalyzer IP.

But i can ping other IPs in the same subnet.

Does anyone have an idea, why it doesn't work`?

If you need some more information, please ask.

Kind regards

Tobias

[tanr]

If you're connecting over a vpn tunnel, why are you setting the source-ip to the wan ip?  It should be the lan ip of the fortigate, which the fortianalyzer should be expecting.  This is assuming you're connecting to the lan IP of the FAZ through the VPN.

config log fortianalyzer setting     set source-ip <FortiGate Internal IP>   You'll need to have your routes and security policies defined to allow this.  The security policies, since they are going lan to lan through the VPN, should not use NAT.