VLAN on WAN not routing traffic

[webmasterloiza]

Our ISP setup our Internet/Data connection via BGP.

In each location, we have a ZHONE EAD and a Fortigate 30D.

The connection problem is policy, I suspect.

Current policy config allows to ping to and from VLAN's, but only lan have access to internet. I cannot access from one VLAN (~~~Net) to the web.

Static route is correctly configured.

[Toshi_Esumi]

If ~~~Net is the interface the default route is pointing toward, no policy is involved to get to the internet from the IP on ~~~Net interface. I would ask your ISP if the interconnect subnet between ISP's router and the 30D, 192.168.252.x/30, should have route to the internet in their network. They might be expecting your 30D to advertise it if the ISP's router on prem is not the BGP neighbor you configured on the 30D.