Forum Discussion
question about Route tables and network virtual appliance
We are using a fortigate Appliance
Out design calls for all internet bound vnet traffic to be routed through the same interface. so the fortigate is using a firewall policy to receive traffic on the 10.0.1.5 interface and and send it out the 10.0.1.7 interface.
The 10.0.1.7 interface has a public ip attached to it
I have noticed that the traffic is being routed to the internet, it seems that is just not coming back
On each attempt I see the same three events in the firewall log
Accept session start
Accept IP Connection Error
Accept Session timeout
Looking a bit further I see that the error indicates that the gate is not receiving a reply from the started session
https://kb.fortinet.com/kb/microsites/search.do?cmd=displayKC&docType=kc&externalId=FD39321
Any chance this is similar to your issue?
No it's not the same , this one seems more complex
I think you need to review the doc on network interfaces and routes
Azure Cookbook | FortiGate / FortiOS 6.2.0 | Fortinet Documentation Library
and also the use of public interfaces
Azure Cookbook | FortiGate / FortiOS 6.2.0 | Fortinet Documentation Library
Also network watcher can give more inputs in Azure side .