FW100D - can ping google but unable to browse?

[meoski]

Hi all,

I'm new in forum anybody encountered the issues, I can ping google/yahoo but unable to browse?

[Spike_Trojan · Accepted solution]

This sounds like a DNS issue to me..DNS not resolving. Are you using a local DNS server or a public dns? 

[meoski]

I'm using the dns below, i try also the google dns still unable to resolved.

Fortinet DNS 194.25.0.60 208.91.112.52

[Kangming]

Hi Meoski,

If the policy only allows ICMP and DNS, this is the case. The policy also needs to allow HTTP/HTTPS, etc. You can check the configuration of the policy.

You can also use sniffer and debug flow to help you determine the issue:

Troubleshooting Tip : First steps to troubleshoot connectivity problems to or through a FortiGate with sniffer, debug flow, session list, routing table

https://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD48032&sliceId=...

Technical Tip: Packet capture (sniffer)

https://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD48032&sliceId=...

 

[Spike_Trojan]

Hi Meoski,

are you able to ping the hostname of amy website from Fortigate CLI...? Is the device you are pingen obtaining IP via dhcp or staticly? Can you try using you configure the ISP DNS both on FW and Client device? 

Is your FW connected to an ISP router? Sometimes the problems can also come from the ISPs router....ie double routing of Public IPs or MTU issues. ...Can you share you config?

Best regards