Hi, I am thinking about why FortiGate-VM instance does not reply a health check on GCP.
I created FG-VM on GCP and have set local-in-policy and admin-profile(restricted address). From GCP console, I can connect SSH and HTTPS on the IP of NW-LAN. *Connect to C.C.C.C
However, trying connect on IP of the external LB is fail.(which is through LB(GCP)) *Connect to B.B.B.B A.A.A.A
<Structure> PC --- Internet --- |GCP| --- (IP:A.A.A.A/x)LB --- (NW-LAN) --- (IP:B.B.B.B/x)FG-VM (--- (NW-GCP console)(C.C.C.C)) *FG-VM is a single. *FG-VM is in an instance group with health check: TCP/80. *A.A.A.A is a public IP of LB. *B.B.B.B is a private IP of FG-VM. *C.C.C.C is a public IP of FG-VM.(for GCP console)
You know when health check fails, we cannot connect to VM. On the same structure, I created Apache and it works correct.
So, I suspect a listening port of FG-VM for health check is not work well.
Thank you for reading and I would like you to give me some advices if you have.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.