SFTP traffic not reaching end site

[cfraser]

Hi there, 

 

One of our users has encountered an issue where they can no longer access an SFTP server hosted by another company. 

 

We have a policy on the firewall (Fortigate 400E) that says that traffic from our staff VLAN that goes to the internet should be allowed to send traffic via SSH to this FQDN. 

 

Tried pinging both the FQDN and the IP address, both not responding. This has been tried on our regular staff VLAN and another less restrictive one, and both have failed. 

 

Checked the Fortigate logs and it is accepting the traffic. 

 

Tracert show's it's leaving the Firewall going to a data centre in the country where they SFTP server is hosted in, but nowhere after that. 

 

Any ideas would be appreciated!

 

Cheers. 

[PaddyNewman]

Trace route to the IP from the school, then trace via a different source IP. 9/10 its going to be them blocking you at the hop before. If your ping works from another public IP (mobile hotspot etc) then i'd bet it is that.