VPN setup between Fortigate and Watchguard

Hello all,

Recently we have purchased a new business and we now need to VPN the 2 sites.
Site A has Fortigate FWF50B router Site B has Watchguard Fireware XTM515.

I've managed to setup the VPN tunnel between the sites and i can easily ping from site B to site A.
However when I ping from Site A to Site B I get a time out.

The way I managed to ping from Site B to Site A is by configuring the Fortigate Policy to allow IPsec.
I'm trying to do the same firewall settings with the Site B firewall (XTM515) and I can't seem to get it right.

This is what I've done so far.
1.  I've ticked "Add this tunnel to the BOVPN-Allow policies" and it shows up in the Firewall list but still can't ping.
2. Manually created the firewall rules to what I think it could be. IPsec - Trusted Network to ANY
3. Disabled NAT

I'm more experienced with Fortigate than Watchguard routers.
Could anyone out there know what sort of firewall settings I need to apply in the XTM515 router.

Thanks.
Fernando MarambioAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JohnBusiness Consultant (Owner)Commented:
For dissimilar VPN boxes with IPsec:

Phase 1:  3DES or other, DH Group 2, SHA-1
No PFS
Phase 2: 3DES or same as above, SHA-1
Pre-shared Key.
Main Mode
Try NAT Traversal ON.

Mirror the settings at the other end.

Those are the key settings and I think you will have to set it up manually for 2 different setups.
0
Fernando MarambioAuthor Commented:
Hi John,

Thanks for that. I can set that up okay with no problem and I can see from the Fortigate side of things that the VPN tunnel is up and running. I can then ping from Site B to Site A, but when I try to ping from Site A to Site B I get a time out. Therefore accessing the network is not possible from Site A to Site B.
0
Fernando MarambioAuthor Commented:
Hi All,
I've found the solution to it right here.
http://www.watchguard.com/help/docs/wsm/xtm_11/en-US/index.html#en-US/bovpn/manual/manual_bovpn_xtm_fortinet_c.html%3FTocPath%3DManual%2520Branch%2520Office%2520VPN%2520Tunnels|VPN%25C2%25A0Interoperability%2520with%2520Third-Party%2520Devices|_____5

I was doing all of the right steps as per the doco. However since I already had another VPN tunnel running in the Fortigate WAN 2 it would not allow me to setup a second one. Configured the VPN to WAN 1 in the Fortigate and I was able to get ping reply from both ends.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Fernando MarambioAuthor Commented:
The VPN setup worked just how it's meant to work.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.