Fortigate 7.4.3 - Trafic over IPSEC

[VincentG]

Good morning,

We randomly encounter IPSEC VPN traffic issues on Fortigate since update 7.4.2 -> 7.4.3. The tunnel does not fall functional, but no more network traffic for several minutes.

Are you experiencing similar issues?

[AEK]

Bonjour Vincent

Try open a ticket.

Meanwhile, can you check if you have any  unused ippool or VIP that are in the same range with the remote subnets (check on both firewalls).

[mle2802]

Hi @VincentG,
Is the tunnel up not passing traffic or it is down for both P1 and P2? Please refer to this article for more information https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Troubleshooting-IPsec-Site-to-Site-T...

Regards,

[VincentG]

Thanks for reply. The phase 2 is UP, there is normal trafic during many minutes, everythings seem good. But in some case like important SMB trafic, the trafic between the 2 networks shut down during some minutes (the phase 2 is again up and there is no ipsec renegociation). The only change was upgrade one of the fortigate 7.4.2 -> 7.4.3, the usage of networkstafic stay the same.

[polerese]

Hi,

Maybe related to :

1012615 : IPsec VPN traffic is dropped after upgrading to version 7.4.3.

https://docs.fortinet.com/document/fortigate/7.4.7/fortios-release-notes/236526/known-issues