Workaround: explicit proxy reports "504 Gateway Timeout" after updating to v6.2.11

[DirkDuesentrieb]

Hi,

after updating to v6.2.11 some connections via the explicit proxy failed, the error was "504 Gateway Timeout".

In my case the explicit proxy used a different source IP for connections over a VPN. This failed because the new source IP was not part of the VPN-topology. 

The workaround was to change all proxy policy rules that use the VPN as outgoing interface and set "Outgoing source IP" to "Original Source IP".

Hope it might help someone!

Greetings,

Dirk

[Rathan_FTNT]

Hello Dirk,

Seems like this is matching the known issue 733863 from 
https://docs.fortinet.com/document/fortigate/6.4.6/fortios-release-notes/236526/known-issues

It is fixed in 7.0.2
regards,

Rathan

[DirkDuesentrieb]

Hi @Rathan_FTNT 

no, the different handling of the outgoing IP must be a new feature/bug in v6.2.11. We updated from v6.2.10 where everything was fine.

Regards,

Dirk