Aws site to site vpn traffic bot visible on onprem firewall

0

Hi, we are having a site to site vpn between aws and fortigate fw. Connection between VMs is successful and they can reach eachother. However, the fortigate can only see traffic from on prem to aws. But from aws to on prem the only visible traffic is ping and ssh. Any other type of traffic is not visible even though it is working fine. Any guesses here , whats wrong ?

2개 답변
0

Make sure the traffic is coming via the Site-to-Site VPN connection, it could be taking another path. You can try filtering the incoming traffic on the Fortigate with destination port and destination IP address and leave the source IP address to understand where the traffic is being sourced from.

profile pictureAWS
Matt_E
답변함 9달 전
  • But the traffic is visible if I just ping or try to use SSH. From the same source. i will try to look for the protocol and port used

  • I did try that and still nothing is showing up at the firewall

0

What other traffic are you expecting to see going to on prem?

Do you have logging on for all your rules if you are using the firewall logs to see the traffic?

profile picture
전문가
답변함 9달 전
  • I am trying to use FTP , RDP , TCP connections over different ports. None of those appear if the connection is initiated from AWS to Fortigate.

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

질문 답변하기에 대한 가이드라인