Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

FortiGate has no access to Analyzer over IPSEC

Dear Support,


I have a HQ site : 

Remote site:


I set up IPsec VPN site to site between the two FortiGates and used the wizard. All devices on the different subnets can reach each other over the ipsec vpn except for the FortiGates, my remote site Fortigate needs to send logs back to the analyzer on the HQ network but can't route to the analyzer which is within the range.

Your guidance would be much appreciated.

Thank you

Valued Contributor II

The security fabric cookbook article mostly covers this.


There are a few gotchas in the cookbook article, which I mention in


Note that unlike what the cookbook article says, you don't need to use NAT for the logging security policy, as long as you set the source-ip in "config log fortianalyzer setting".


Afraid I can't remember if the "vpn ipsec phase1-interface" needs to have both local-gw and remote-gw set for this.

New Contributor



I thank you for guiding me in the correct direction, after adding more phases to my tunnel and adding the correct policies I managed to get it working.


Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Top Kudoed Authors