Fortinet Community

Hi Debbie, So is there an ability to set a self-originating traffic address for the SSL VPN Portal?Like I mentioned, I used to use an IP Pool on the traffic rule and it seemed to work - but now it stopped!CheersJon

No problem Debbie I have a strong feeling that this is to do with self-originating traffic and IPSEC interface IP addresses and will try and pursue that :) This is a capture of a ping from the firewall across the VPN: You can see the IP address is pa...

Thanks Debbie,I have a normal policy which had a NAT Pool of addresses within the production network which is within one of the P2 selectors (10.x.x.x/8) Incoming: ssl.rootOutgoing: CrawleyIPSECSource: allDestination: The hostsNAT: onPool: Use Dynami...

FGT_601E_FW1 # exec ping 172.16.11.12022-01-12 12:53:51 id=20085 trace_id=1 func=print_pkt_detail line=5783 msg="vd-root:0 received a packet(proto=1, 192.168.243.254:2560->172.16.11.1:2048) from local. type=8, code=0, id=2560, seq=0."2022-01-12 12:53...

I've now noticed it on other Portals. It's where the SSL portal traffic is directed through an IPSEC VPN also terminated on the same box. There is an IP Pool on the rule (on the same interface IP range as the production network) which managed to get ...