How to see VPN traffic

rsfernandes · ‎01-22-2018

Hello Guys, Do you have a suggestion how to see the VPN traffic, not just the communication between borders but inside of this VPN ? Many Thanks

rwpatterson · ‎01-22-2018

Please, open a new thread. Bringing a dead post from May 2008 back from the grave isn't going to buy you any useful information. Post has been split by FTNT Admin.

Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com

ede_pfau · ‎01-22-2018

AFAIK decrypting encrypted traffic is not feasable with onboard tools in FortiOS. But you can sniff the traffic before it enters the tunnel, or after it leaves it.

That's the whole point in IPsec - confidentiality!

Ede

"Kernel panic: Aiee, killing interrupt handler!"

lorenzhope · ‎01-30-2018

I think you can use the cli with the following command:

diag sniffer packet <interface_name> "any kind of filter (per example: host 192.168.1.1 and icmp)"