When allow-traffic-redirect is enabled, redirect traffic that ingresses and egresses from the same interface may incorrectly get dropped if the source address of the incoming packet is different from the FortiGate's interface subnet and there is no firewall policy to allow the matched traffic.Workaround: disable allow-traffic-redirect and create a firewall policy to allow traffic to ingress and egress for the same interface.config system global set allow-traffic-redirect disable end When allow-traffic-redirect is enabled, redirect traffic that ingresses and egresses from the same interface may incorrectly get dropped if the source address of the incoming packet is different from the FortiGate's interface subnet and there is no firewall policy to allow the matched traffic.Workaround: disable allow-traffic-redirect and create a firewall policy to allow traffic to ingress and egress for the same interface.config system global set allow-traffic-redirect disable end When allow-traffic-redirect is enabled (default setting), redirect traffic that ingresses and egresses from the same interface may incorrectly get dropped if the source address of the incoming packet is different from the FortiGate's interface subnet and there is no firewall policy to allow the matched traffic.Workaround: disable allow-traffic-redirect and create a firewall policy to allow traffic to ingress and egress for the same interface.config system global set allow-traffic-redirect disable end When allow-traffic-redirect is (default setting), redirect traffic that ingresses and egresses from the same interface may incorrectly get dropped if the source address of the incoming packet is different from the FortiGate's interface subnet and there is no firewall policy to allow the matched traffic.Workaround: disable allow-traffic-redirect and create a firewall policy to allow traffic to ingress and egress for the same interface.config system global set allow-traffic-redirect disable endSee this community guide for more details Technical Tip: How to allow traffic when using the same logical interface for ingress and egress with source and destination IP is from different network.