https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202769#M38145 <P>Definitely seems like domain based, otherwise FGT enc domain would be 0.0.0.0/0</P> Wed, 10 Jan 2024 18:12:28 GMT the_rock 2024-01-10T18:12:28Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202766#M38143 <P>Hi&nbsp;<a href="https://community.checkpoint.com/t5/user/viewprofilepage/user-id/45104">@All</a></P><P>&nbsp;</P><P>We have a Site to Site IPSec VPN with our partner having FortiGate firewall. We have faced an issue with one of the outbound services. Our source IP is<BR /><BR />Local ED: 10.100.3.70<BR />Remote ED: 102.218.49.85<BR />NAT IP: 196.188.175.136<BR /><BR />They want our ED to be natted to the NAT IP. When I have done the "fw ctl zdebug + drop | grep 102.218.49.85" attached here with is the error. Can anyone look into it?<BR /><BR />Appreciate your help.</P> Wed, 10 Jan 2024 17:29:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202766#M38143 gemechisd 2024-01-10T17:29:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202768#M38144 <P>Is this route based VPN or Domain based VPN? If domain based, did you add the NAT address to the VPN domain group and is your rule configured to utilize the correct VPN community?</P> Wed, 10 Jan 2024 18:07:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202768#M38144 JoSec 2024-01-10T18:07:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202769#M38145 <P>Definitely seems like domain based, otherwise FGT enc domain would be 0.0.0.0/0</P> Wed, 10 Jan 2024 18:12:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Site-to-Site-IPSec-VPN-with-NAT/m-p/202769#M38145 the_rock 2024-01-10T18:12:28Z