VIP not working

[edoutreleau]

Hi

I have just migrated from pf to a fortinet firewall and i have trouble using VIP

i have 3 interfaces

internet VLAN 52

pseudo DMZ : vlan 23

internet : vlan 747

pseudo DMZ is a private ip adress network and i would like to permit access to a ssh server inside.

then i create a vip.

user connect to a public adresse xxx.xxx.0.209 port 2222 to access to 192.168.3.13 22 

the xxx.xxx.0.209 adresse is behing the vlan 747.

show firewall vip config firewall vip     edit "genhotel access"         set uuid c1e57cc2-cf2b-51e5-423b-375e9bb258a2         set comment "acces a atlantis pour genhotel"         set extip 193.50.0.209         set extintf "any"         set portforward enable         set mappedip "192.168.3.13"         set extport 2222         set mappedport 22     next end

   

show firewall policy 72 config firewall policy edit 72 set uuid 030f3a48-d4d2-51e5-60b7-37e55a3f8ffa set srcintf "Vlan52" set dstintf "Vlan23" set srcaddr "all" set dstaddr "genhotel access" set action accept set schedule "always" set service "SSH" "TCP2222" set utm-status enable set av-profile "default" set ips-sensor "default" set application-list "default" set profile-protocol-options "default" next end

This rule is the first one

When i go in debug mode 

diagnose debug disable diagnose debug flow trace stop diagnose debug flow filter clear diagnose debug reset diagnose debug flow filter addr xxx.xxx.0.209 diagnose debug flow show console enable diagnose debug flow show function-name enable diagnose debug console timestamp enable diagnose debug flow trace start 999 diagnose debug enable

I got

2016-02-19 18:38:24 id=20085 trace_id=2000 func=print_pkt_detail line=4378 msg="vd-cng-fw received a packet(proto=6, 5.135.156.145:50014->xxx.xxx.à.209 :22) from Vlan52. flag , seq 940801493, ack 0, win 29200" 2016-02-19 18:38:24 id=20085 trace_id=2000 func=init_ip_session_common line=4527 msg="allocate a new session-0356b5b0" 2016-02-19 18:38:24 id=20085 trace_id=2000 func=fw_local_in_handler line=382 msg="iprope_in_check() check failed on policy 0, drop"

I m wondering what is this policy 0?

thanks in advance for any help