viewing cameras remotely

[jared8609]

I have a few old DVRs that still use port forwarding to access. I can see them all without any issues, on any device. But once I'm in my office, on the Fortigate 60 LAN I can't see any of them. Internet and everything appears to be working fine. I'm access them with ICMS software using a static I.P. and port 9000. Everything works if i don't use the LAN. I'm stumped on this.

[MGabriel]

Hello Jared8609

The problem only occurs when you try to access cameras connected directly to the firewall, right?

Have you checked the logs > system events section in your firewall?

Make sure if you have any information when accessing the cameras in the firewall logs, such as blocking or even a lack of route/port released.

[jared8609]

I forgot to mention the DVRs are at different locations with static I.P.s. So my issue is going from  PC>switch>fortigate>ISP~ISP>Router>DVR. Couldn't find anything in the logs

[adimailig]

I strongly suggest to check debug and traffic flow as well as packet capture to see if there is any blocking on Fortigate.

Reference : https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-First-steps-to-troubleshoot-connecti...

diag sniffer packet any "host X.X.X.X and port 9000" 6 0 a

diag debug reset
diag debug disable
diag debug flow filter clear
diag debug flow filter addr X.X.X.X
diag debug flow filter port 9000
diag debug flow show iprope enable
diag debug flow show function enable
diag debug flow trace start 999
diag debug enable

Also, on firewall policy enable logging for all session (Log Allowed Traffic = Enable/All Sessions) and then check Forward Traffic Logs (Log & Report > Forward Traffic) if there is any blocked/denied traffic.

https://docs.fortinet.com/document/fortigate/5.4.0/cookbook/476970/logging-fortigate-traffic-and-usi...