Problem accessing website

[DecGest]

I am having trouble accessing the website https://concesionarios.gpat.com.ar/webconcesionarios

I see that my two Fortinet 80F and 100F devices are automatically blocking me without any blocking filter. I tried creating a web filter and DNS filter to allow me to access the page, but it still won't let me in. That's why I need your help to see what options I can try to allow me to access the page mentioned above.

I'm attaching screenshots of the settings I've configured. If you need more information, I can provide it.

Thank you very much for your help.

Screenshots:

[AEK]

In the same policy (ID 49), enable all traffic logs, enable also violation logs in the implicit deny policy (ID 0) then redo the test, then check the traffic logs to see why the traffic is blocked.

[DecGest]

I'll send you the log for policy ID 49.

[dingjerry_FTNT]

Hi @DecGest ,

If you did not have any UTM profile applied in the firewall policy, do not try to add Web Filter or DNS Filter profile to fix the issue.

According to the log message you provided, it is "TCP Reset from server", it is the server resetting the connection, not an FortiGate issue.

[AEK]

Here we can see the traffic is allowed but there is a TCP reset from Server side.

As per my experience the issue comes from server side.

[DecGest]

It's very strange, because when I try to connect from the Forti firewall network, I can't reach the destination, but when I access it from an external network, I can reach the destination. However, when I spoke to support at www.gpat.com.ar, they told me that it's a public access point with no restrictions...

It's VERY STRANGE what's happening.

[AEK]

As suggested by Jerry above, even if the issue is probably from server side, you can still try use firewall policy without UTM (security profiles), and share the result.

[sokelno5]

Okay. I get my internet through the office of the building I live in. I never interacted with an ISP. I simply paid a fee, bought my own router (a Netgear), plugged the ethernet cable into the port on my wall, and boom, I had internet.