Web Filter causes VPN connection to fail

[jallen64]

I recently turned on web filtering and now the site-to-site tunnel and any user who connects times out every few minutes.  No changes to the clients or the site-to-site tunnel have been made.  It doesn't matter if they connect using the forticlient software or the built-in Mac or iOS client, it disconnects and the site-to-site fails.  What could be the issue?

[tanr]

Just a possibility, but have you tried changing the port that FortiGuard uses from 53 to 8888? Per https://forum.fortinet.com/tm.aspx?m=147316 and some other threads Web Filtering uses port 53 by default, which should be fine, but since UDP 53 is also DNS and some ISPs (and their modems) have trouble with non-DNS use of port 53.

[jallen64]

tanr,

Thanks!  That seemed to work.  I seem to no longer have the tunnel crashing.