This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(35.2, 80%, 13%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EK%3C/text%3E%3C/svg%3E)
Hi,
I'm trying to deploy FortiGate in Azure, but I want FortiGate to be able send out the traffic with public IP. I set up public load balancer with floating IP, created VIP on FGT with public IP and it works, but outbound traffic doesn't work. FortiGate SNATs traffic to public IP and Azure denies it. Is there a way to force Azure to accept it?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(134.4, 59%, 23%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECM%3C/text%3E%3C/svg%3E)
Thank you for reaching out.
I understand that you are facing issue with outbound connectivity from the FortiGate NVA's Public IP
There can be a NSG rule which might be blocking the connectivity. You can use IP flow verify to check if any NSG present in the network is blocking the connectivity.
If this does not help, can you share a rough network diagram and routes applied? The scenario above can also be caused by asymmetric routing configuration.
Thanks
Hi,
Thanks for the answer. No, it's not NSG rule, it permits any to any. Outbound traffic works if FortiGate doesn't do source NAT to public IP. Traffic with a private IP address goes out normally..
Thank you for getting back.
Can you try the troubleshooting steps mentioned here? and see if you are able to diagnose a routing problem by viewing the routes that are effective for a network interface.
If this does not help, can you share a rough network diagram? Thanks
I checked NSG and it permits any to any. Also checked routing and it's ok. If FortiGate forwards traffic with private address and doesn't do SNAT to public adres, it works.