Forticlient VPN thru USGFLEX50

umangini25362

Hi everyone.
I need to let my notebook connect to an external VPN on a fortigate via IPsec (FortiClient IPsec).

Everything works fine except for being at office where my USGFLEX50 seems not to let me connect to the external fortigate.
Obviously my notebook has no filters outgoing and I can see IKE packet ougoing correctly but nothing else…
Ideas?

Zyxel_Melen

Hi @umangini25362

You will need to ensure:

1. If you can reach the VPN server. Please note that the protocol that FortiClient IPsec needs to be allowed on USG FLEX 50 from LAN to WAN.
2. If it is allowed, please check the logs on fortigate to find the reason for failing.

PeterUK

If needed test without FLEX 50 to rule out other problems

umangini25362

Thank you Zyxel_Melen and PeterUK for your kind answare.

Yes: I can see IKE packet outgoing to the Fortigate correctly (but nothing more) and yes, I can mount VPN without FLEX50 in the middle.