ZTNA - in-office Issues

[Stephan_s]

Dear Colleagues,

I'm currently implementing ZTNA as a VPN replacement. I added some ZTNA Servers and Policies for them and from the outside its working quite well. But if I'm in the office, I'm facing some issues, especially with resources connected via vpn-tunnels. I'm using a nat-pool (set pool-name) to translate to an internal IP which is routed over the tunnel (BGP). But while it is working from outside, it is not from internal network. I did a "debug sniffer packet ..." and it looks like the forti is sending the packets to the wan interface and not through the vpn tunnel. What am I missing?

thanks in advance

best

stephan

[Stephan_s · Accepted solution]

I found it, it was just misconfigured Policy Routes. Sorry for the useless Post. Merry Christmas to all of you.

best, stephan