What setting can let splashtop go through

[RichardKo]

Does anyone know how to set up a policy that Splashtop can go through?

I try to create a wildcard address and use Internet Service in Destination, but none of those works.

Product: Fortigate 100E

Firmware: v7.2.2 build1255

FortiGate 

[AlexC-FTNT]

Does it work when you allow all the traffic out? (without filtering by application/ISDB,etc? )

What protocol/ports does this app uses/needs? Did you disable SIP-ALG (by mistake or for some other reason)? What does the logs or debug flow tells you?

[RichardKo]

Because I have more than one subnet that, I need to set a specific policy for it.
It works if I allow all traffic, but that's not what I need.

The protocol is Internet Service.

[gfleming]

What are you trying to accomplish? By default all applications / web sites will be allowed through a firewall policy (assuming all ports and all IP addresses are allowed).

So, what is your end goal here in terms of "letting Splashtop through"?

[RichardKo]

I need to set up a specific policy for one subnet that only Splashtop can pass through.

[gfleming]

OK so create a policy for that one subnet that allows all traffic (including Splashtop). Then below it create another policy for all other networks that allows all traffic but blocks Splashtop.

[RichardKo]

What I mean is I want to create a policy that blocks all traffic except Splashtop.

Because this subnet need to be secure.

[gfleming]

OK then create a policy for that subnet that allows access to Splashtop *only*  using ISDB entry for that service.

Then create a policy below that for that subnet that blocks everything.

[RichardKo]

I did, but not working. I can't use Splashtop to remote.

[gfleming]

OK what do your logs show? What is the destination IP address that is being blocked?