Policy routes, inbound doesn't work

[VitaliyN]

Hello!

using Fortigate 100e, firmware v6.4.0 build1579 (GA).

Here is simplified scheme:

Policy route outbound to 0.0.0.0 and response works fine, but inbound from 0.0.0.0 doesn't.

We have been using mikrotik routers before, worked fine with mangle and routing marks.

Any way to fix that, or i need to use dedicated interfaces to connect FGT01 with FGT03, TMG1 and TMG2 ?

[Toshi_Esumi]

My instinct says you probably need to split them into three different interfaces, like three VLANs. A FGT returns to the same "interface" if the session was initiated by outside as long as those three default routes exist (true in your case). Your current setup is the three GWs are on the same interface (port4) so I would assume the FGT01 always returns to 172.16.254.253 for out-to-in sessions.

Does anyone have a different idea?