Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
New Contributor

FortiGate - setup ZKTeco Biometrics to VM server

i have set the ZKTecho Biomertics ip:x.x.x.x to connected to VM server IP :x.x.x.x for montring attendence i have update the police for all ports but still the connection not coming . need to create the VIP for ZKTecho Biomertics ? becaue already i testing by this but not working please assist if you have idea how can we integrated ?

Contributor III

Hello @gutta ,


If your monitoring person connects from the internet to this server. Yes, you need to create a VIP. You can get more information about VIP in this document. Also if you can share your configuration with us, we can advise to you.




If you have found a solution, please like and accept it to make it easily accessible to others.
NSE 4-5-6-7 OT Sec - ENT FW
If you have found a solution, please like and accept it to make it easily accessible to others.NSE 4-5-6-7 OT Sec - ENT FW

Hi @gutta,


Yes, you need VIP to allow incoming traffic. Please refer to




VIP are needed only if you want to access certain IP address and you want to forward specific or all traffic to a different IP address. For instance, if you want to access the device from outside through your public IP address -- since it's biometrics device then that's unlikely to be the case.
If the endpoints are in the same broadcast domain (Ex. biometrics, VM server: then no need for firewall policy, if not, then create a firewall policy and make sure the IP address, subnet mask, and gateway are set correctly on that biometrics device.

New Contributor

Did you find any solution for this matter ?


If it still does not work after creating a VIP and firewall policy, I suggest collecting the debug flow from the FortiGate while you reproduce the issue.

Top Kudoed Authors