Fortigate 7.4.3 - Trafic over IPSEC

[VincentG]

Bonjour,

nous rencontrons de façon aléatoire des soucis de trafic VPN IPSEC sur des Fortigate depuis mise à jour 7.4.2 -> 7.4.3. Le tunnel ne tombe pas est fonctionnel, mais plus de trafic réseau pendant plusieurs minutes.

Rencontrez-vous des soucis similaires?

[AEK]

Bonjour Vincent

Try open a ticket.

Meanwhile, can you check if you have any  unused ippool or VIP that are in the same range with the remote subnets (check on both firewalls).

[mle2802]

Hi @VincentG,
Is the tunnel up not passing traffic or it is down for both P1 and P2? Please refer to this article for more information https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Troubleshooting-IPsec-Site-to-Site-T...

Regards,

[VincentG]

Thanks for reply. The phase 2 is UP, there is normal trafic during many minutes, everythings seem good. But in some case like important SMB trafic, the trafic between the 2 networks shut down during some minutes (the phase 2 is again up and there is no ipsec renegociation). The only change was upgrade one of the fortigate 7.4.2 -> 7.4.3, the usage of networkstafic stay the same.