Displying Firewall Login when searching domain name

[BioMining]

Hi all,

I am using Fortigate 40c firewall. Currently i have mapped a private ip and pubic ip to the firewall. i have added all the required information given in http://cookbook.fortinet.com/using-virtual-ips-configure-port-forwarding-54/. But it displaying the firewall login when am trying to access the domain from outside connection.

Thanks in Advance

[mahesh_secure]

Hi

i think your trying to access the 443 or 80 port from outside. firewall login also use the same port to access GUI.

change the firewall login port in the administration settings. change to 8080 from 443

Regards

Mahesh

[BioMining]

Thanks for your replay Mahesh.

Our port configurations is like:

HTTP Port : 80

HTTPS Port: 443

Telnet Port :23

SSH Port :22

 We are still facing the same problem.

Thanks in advance

[mahesh_secure]

Hi

if you trying to access your domain with https then change the https port in admin settings to 8080

or if you trying with http then change http port in admin settings to 81

ex:- https:\\test.yourdomain.com

       http:\\test.yourdomain.com

Regards

Mahesh

[BioMining]

Hi,

Thanks for the quick reply.i am trying to access the website using http only. so now i have changed the port to 81 . now the "unable to connect" error message displaying while accessing the domain name.

Thanks in advance

[mahesh_secure]

Hi

now you have to verify the VIP settings. make sure that you have config VIP with below settings

1.external ip address is ISP ip address

2.mapped ip is internal system ip

3.both external and mapped ports are same ( 80 )

4. a policy from wan interface to lan interface with destination address as VIP you have created under firewall VIP

also please share the below output

config firewall vip

show

Regards

Mahesh

[BioMining]

Hi,

Thanks for the reply.

Now our config firewall shows the following;

"Webserver" set extip *.*.*.184 set extintf "wan1" set portforward enable set mappedip 192.168.1.100 set extport 80 set mappedport 80

Exip is the IP provided by the isp which is pointed to the domain name.

We have also created wan to lan policy with destination address as vip(mappedip)

[mahesh_secure]

Hi

1. is that possible to access web service in local lan ?

2. any policy route is config in firewall unit?

3.make sure that windows firewall is off in server (192.168.1.100)

just try to enable NAT in external to internal access policy just for checking the connection accept status

also collect the below log and share if possible

diag debug disable

diag debug reset

diag debug flow filter saddr ( ip from your trying to access the domain )

diag debug flow filter daddr ( server ip 192.168.1.100)

diag debug flow show function-name enable

diag debug flow show console enable

diag debug flow trace start 1000

diag debug enable

Regards

Mahesh

[BioMining]

Hi,

1.i can able to access web service from local LAN.

2.Routing is enabled in the interface

3. Actually we configured a Linux server not windows

diag debug flow filter saddr 

Host saddr: any

diag debug flow filter daddr

Host daddr: any

Thanks in advance