Connect VPN SSL by other WAN interface

[papapuff]

Hi There,

We using Fortigate FG-60D.

please kindly advice in create policy.

we have 2 WAN connection.

WAN-2 dedicated for VPN connection to interface Port-1 (both for VPN IPSec point-to-point & VPN SSL for mobile user).

WAN-1 for daily operational.

Port-1 for Intranet.

Port-2 for front desk.

for our internal policy,

1. all front desk can't access our Intranet for work.

2. all front desk only connected to Port-2, and connect internet using WAN-1.

some staff front desk have special privilege to access Port-1, but must use vpn ssl connection.

1. we have create vpn ssl User for that staff

2. vpn ssl connection can be accessed by outside office.

summary for interfaces and policy:

1. WAN-1 for operational internet.

2. WAN-2 for dedicated to VPN IPSEC and VPN SSL

3. Port-1 for LAN

4. Port-2 for Wifi to Internet.

a. Port-1 -> WAN-1 is blocked.

b. Port-2 -> WAN-2 is allowed

c. VPNSSL(WAN-2) -> Port-1 is allowed

d. Port-1 -> WAN-2 is blocked

user can't connect to VPN SSL while use internet connection WAN-1.

looking for help / guidance please.

thanks in advance.

[papapuff]

hello there...anyone may have same advice/experience?

[papapuff]

hi.sorry forgot to mention.

our device is FG60D with firmware 5.2.10 build 742

currently, error message as below:

Warning --------------------------- Unable to establish the VPN connection. The VPN server may be unreachable.

thanks

[papapuff]

hello there..

need guidance here.

anyone can help?

thanks in advance