Fortigate 100F ipsec between 2

[supercato]

Hi

I have a strange bug, i have two fortigate f100 with ipsec connection up and runing, I have sslvpn on one ot then allowing me access to the other side.  I can ping all the vms on both side from ssl vpn, I can ping "somes" VM between sites through  ipsec. But I have 3 of them  2 Sice a and 1 side b, that I cannot ping through ipsec ( they are pignable from SSL VPN only ) .

I'm new in this forti brand, any tip will be great.

thank you

[johnathan]

The most common issue with IPsec tunnels where some resources are accessible from one source but not another would be the Phase 2 Selectors. I would make sure these can 'fit' your traffic through. You can alternatively NAT the traffic instead. If you want, you can share what is configured for the policy and tunnel.