I'm trying to lose the draytek out of the equation and just have fortigate to fortigate. Fortigate has no settings for not initiating on port 80. On the log the phase 1 traffic is initiated on port 500 not port 80 which confuses me as surely I would see the tunnel being initiated on port 80 if it was the transparent proxy that was causing this problem. on the fortigate we have two interfaces one we are reserving for intersite comms and one for webtraffic etc, both have ntl business essential lines on them. and we are routing traffic through the fortigate hence the requirment for it to be there. However at the mo I have the fortigate routing to the draytek which brings the tunnel up no problem. But the minute I take the draytek out the tunnel is failing to create from fortigate to fortigate. need to do some more research into this.
