ultra VNC on new WIFI range

[Forti-Mon]

We have a Fortigate FW
We have a Forinet AP which we have setup with domain and guest WIFI

The AP WIFI is on a different IP range

The device connects to the staff WIFI and the domain can be seen all network drives etc.

I am unable to connect to this device via Ultra VNC from our other devices on the LAN - which we will need to be able to do.

I went through looking at creating a VIP and attempting to set a policy and using that as the destination but from what I have read this cannot be done anymore in forti OS

I am struggling so if anyone could assist?

Thanks

[AEK]

On your firewall make sure you allow the required traffic from LAN to staff WiFi. I think for Ultra VNC you need to allow ports 5800 and 5900 TCP/UDP.

[Forti-Mon]

Perfect - sorted, thanks!