Some VPN traffic is blocked by web filtering

[andrei]

Hello everyone, I configured a site-to-Site VPN between a fortigate 1000C (main network of the company) and a fortigate 60C. The VPN works fine but I have a problem with traffic management. I have a server on which Sage Payroll users connected to the firewall 60C connect through VPN tunnel, the problem is that some of the traffic from hard Sage server is blocked when I enable web filtering and application control at the filtering policy of Lan. It is impossible for users to export from Sage server payroll files in pdf format, but as soon as I turn off the application control and web filtering, export pdf files works. I would not have to disable security options on my network to allow the application to work normally. Also that Sage application is working with several services working with several different ports. How to allow all traffic from my Sage server (public or private) through the VPN and filtering Lan level? - FortiGate 1000C Lan: 192.168.0.0 / 16 - Fortigate 60C Lan 192.168.2.0/24

[Dipen]

You are saying that Application is not accessible when you enable Filtering Policy on LAN. Do you have the WebFilter UTM enabled on LAN-IPSEC Policy ? Since LAN-IPSEC Policy does not involve internet WebFilter should not be required.

[andrei]

Hi dear, The application is accessible, users can connect to the application but they cannot extract pdf files from the application when the WebFilter UTM is enabled on LAN-WAN Policy. There is no WebFilter UTM enabled on LAN-IPSEC Policy. Extraction of pdf files is working only when I disable WebFilter UTM from LAN-WAN Policy.

[ruanbatista]

Hello, Can you send a basic diagram about this scenery? I think that your application try make some connection to internet when transfer files. It is generating a traffic log from LAN to WAN? If you disable application control only and keep the web filter. It works?