Websites are not loading - Fortigate 120g

[FortinetBeginner]

Hello everyone,

We are using a Fortigate 120g. However, we can't open any website.

Ping and DNS works on the client and on the fortigate and the packets are forwarded on the fortigate without dropping any packets.

When we connect directly to the Fortigate 120g, we can access the Internet and open web pages without any delay.

When we disconnect the Fortigate 120g and connect our old firewall, everything works fine right away.

What we tried:

Configuring port speed 1000Full on our Cisco CL9200 switch and on the Fortigate 120g.

Do you have any idea how we can fix the problem?

Thank you in advance!

Best regards

[salemneaz]

 Please check the Following from the Firewall CLI.

exec ping www.google.com 

Check the Policy if you have enabled webfilter and the Licenses are active. Check the routing table.

Follow the article Reference after you run the above diagnostics steps

https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-website-is-not-reachable/ta-p/210201

[FortinetBeginner]

Hi Salem,

DNS works fine, but Troubleshoot-2 from your link shows only ICMP packets, but no TCP/443 packets. (See attachment).

Ralf

[salemneaz]

from the Firewall GUI can you do this 'exec ping www.google.com'

[salemneaz]

share the output for "config system dns" then show full

[FortinetBeginner]

Ralf

[salemneaz]

share the output as well

exec ping www.google.com

from the Firewall CLI

[salemneaz]

do this 

config system dns

set protocol cleartext

end

[FortinetBeginner]

ok, done.

[FortinetBeginner]

Yes, I can ping www.google.com