[Fortigate] IP connection error

[sw408b]

5.4.8 Firmware.

IP connection error log is displayed.

What is the cause, and how can I fix it?

[Bubu]

Hi,

Probably because:

http://kb.fortinet.com/kb/documentLink.do?externalID=FD39321

Regards,

[Alexis_G]

I suppose it is a routing issue

[darwin_FTNT]

If the session is a DNS session (port 53), and the response code isn't 0.

If the session isn't a DNS session, then the session received an ICMP packet with error code:

ICMP_DEST_UNREACH ICMP_SOURCE_QUENCH ICMP_TIME_EXCEEDED ICMP_PARAMETERPROB ICMP_REDIRECT

It is enabled for the session if the policy has traffic log enabled, e.g., set to logtraffic-all (have to verify).

[4xdaveo]

make sure the system is actually online and that the Microsoft firewall is not blocking the response.