tcp reset from client - utm allowed

[Halo0712]

I have a problem with scans from the printer.
same Microsoft user with same email and different IP addresses on 5 printers.
The first two configured, one on port 25 and one on 587, work, the others don't and it appears on the utm allowed action TCP reset from client, does anyone know the solution?
Thank you

[rahul_p1]

Hi, 

If possible do ping from the printer to fortigate interface IP. Is it pingable?

Enabled the NetBIOS option(under network adapter settings) in the client machine and make sure to disable Windows Defender.

[Halo0712]

ip pingable

and net bios activated

[FortiArt]

You can disable any security software running on the client side and check again.

In addition you can run:

diagnose sniffer packet any 'port xxx' 4 <- xxx is the non working printers port number

Also,

diagnose debug reset

diagnose debug flow filter port xxx <- same port as above

diagnose debug flow show function-name enable

diagnose debug flow trace start 1000

diagnose debug enable

From the above commands you can follow routing, firewall policy and possible errors.

Hope this helps