AWS re:Postを使用することにより、以下に同意したことになります AWS re:Post 利用規約
AWS re:Postre:Post

Aws site to site vpn traffic bot visible on onprem firewall

0

Hi, we are having a site to site vpn between aws and fortigate fw. Connection between VMs is successful and they can reach eachother. However, the fortigate can only see traffic from on prem to aws. But from aws to on prem the only visible traffic is ping and ssh. Any other type of traffic is not visible even though it is working fine. Any guesses here , whats wrong ?

トピック
ネットワークとコンテンツ配信
タグ
Amazon VPCネットワークとコンテンツ配信AWS Virtual Private Network (VPN)
言語
English
Amr Fawzy
質問済み 9ヶ月前295ビュー
2回答
0

Make sure the traffic is coming via the Site-to-Site VPN connection, it could be taking another path. You can try filtering the incoming traffic on the Fortigate with destination port and destination IP address and leave the source IP address to understand where the traffic is being sourced from.

profile pictureAWS
Matt_E
回答済み 9ヶ月前
  • Amr Fawzy
    9ヶ月前

    But the traffic is visible if I just ping or try to use SSH. From the same source. i will try to look for the protocol and port used

  • Amr Fawzy
    9ヶ月前

    I did try that and still nothing is showing up at the firewall

0

What other traffic are you expecting to see going to on prem?

Do you have logging on for all your rules if you are using the firewall logs to see the traffic?

profile picture
エキスパート
Gary Mclean
回答済み 9ヶ月前
  • Amr Fawzy
    9ヶ月前

    I am trying to use FTP , RDP , TCP connections over different ports. None of those appear if the connection is initiated from AWS to Fortigate.

ログインしていません。 ログイン 回答を投稿する。

優れた回答とは、質問に明確に答え、建設的なフィードバックを提供し、質問者の専門分野におけるスキルの向上を促すものです。

質問に答えるためのガイドライン

関連するコンテンツ