Can't Access Management through IPsec

AbdelAziz-Maysara · ‎06-20-2023

I have IPsec setup between the data center firewall and a remote site firewall .

I can access via ssh & telnet also ping is working but http(s) is not working.

the connection is through the wan link and MGMT interface in a lan 1 interface.

Best Regards,
AbdelAziz Maysara
Network Security Specialist

Mobile +201010115008
Email Abdelaziz_maysara@hemayait.com

Tel +20 2 2358 8459
Fax +20 2 2358 8453
Website www.hemayait.com

10 Wadi El Nile St., Maadi, Cairo, Egypt

abarushka · ‎06-22-2023

Hello,

I would recommend to collect debug flow and traffic sniffer while trying accessing management interface and check for anomalies:

sniffer:

diagnose sniffer packet any 'host <source IP address>' 6 0 a

debug flow:

diagnose debug flow filter saddr <source IP address>
diagnose debug flow show function-name enable
diagnose debug flow trace start 10
diagnose debug enable

FortiGate