we have one server.we can not access this server from outside.Qs 1: was this ever working? 2: have you ran any diagnostics e.g diag sniffer packet wan1 " host x.x.x.x and port 80' replace x.x.x.x and the port number to be your server and the correct wan interface/port 3: Do you see traffic entry the firewall from any external address? 4: did you run diag debug flow ? 5: if yes what did the diagnostic show you? e.g diag debug reset diag debug enable diag debug flow filter addr x.x.x.x diag debug flow filter port 80 diag debug flow show console enable diag debug flow trace start 100 Make sure to diag debug dis and diag debug reset when done you can follow my blog here on how to accomplish this and understanding the output http://socpuppet.blogspot.com/2013/03/flow-diagnostic-fortigate.html http://socpuppet.blogspot.com/2013/06/diag-debug-flow-troubleshooting.html http://socpuppet.blogspot.com/2013/06/diag-system-session-quick-way-find.html
PCNSE
NSE
StrongSwan
Bob - self proclaimed posting junkie!
See my Fortigate related scripts at: http://fortigate.camerabob.com
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1740 | |
1108 | |
752 | |
447 | |
240 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.