IP sec tunnel connection from fortiweb

[Daniyal007]

Hi there,

I have fortigate configured as my EDGE device and some ip sec tunnel are created in that fortigate device to access servers behind firewall.

now we have put fortiweb between server and fortigate. everything is working fine but i want to know that how ipsec tunnel created on fortigate can communicate to the server which is back at fortiweb 

need some help please.

Thanks

[AEK]

Hi Dan

Suppose your FWB's VIP is in DMZ. Create a firewall policy like this:

• srcintf: IPsec tunnel interface
• dstintf: DMZ
• from: IPsec tunnel IP range
• to: FWB-VIP
• service: HTTP, HTTPS

And you are done.

[Daniyal007]

the traffic of ipsec is SFTP and i want to that does we have to do any changes remote site?

[AEK]

I think a similar post has just been resolved.

https://community.fortinet.com/t5/Support-Forum/Assistance-Required-for-FortiWeb-in-Reverse-Proxy/m-...

Hope it helps. Otherwise please elaborate a bit more so we can help.