Hairpin broke on update from 5.4.5 to 5.4.6 ?

[gary2017]

Hi,

I just updated our Fortigate 100D from 5.4.5 to 5.4.6 and for some reason the hairpin I had set up stopped working.  It was set to route from two (different) WiFi tunnels to an internal (lan) VIP with external wan2 interface.  I tried reconfiguring to the other hairpin method - also without success.

Any clues as to what I should look at to determine what's wrong?

Thanks,

Gary

[gary2017]

Thought I'd post the "resolution".

After opening up a support ticket, and a rather lengthy debugging session with support, we were able to get this working again by a process of trial and error. We eventually disabled App Control on the inbound (wan) rule.  Both 5.4.6 and 5.4.7 seem to have the same problem.

Hope this helps someone else,

Gary