This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

No Internet if IPsec VPN is connected

Hello community,

I have a Sophos XG 115 with latest software.

I set up a IPsec VPN with NAT according to https://community.sophos.com/kb/en-us/123356.

My Problem is now, if the tunnel is up, the connection to the remote net works fine, but i can not connect to to the internet from the office.

Any ideas?

Thanks

This thread was automatically locked due to age.

0 rfcat_vk over 4 years ago

Hi,

what firewall policies do you have in place? Are you using policy based routing?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Fërd over 4 years ago in reply to rfcat_vk

rfcat_vk said:

Hi,
what firewall policies do you have in place? Are you using policy based routing?

Ian

Hi rfcat_vk,

a default rule Source LAN destination WAN allow any.
some for PAT Rules for Exchange and IP-Telephone.and one for mail scanning
and one for incoming VPN-Traffic and one for outgoing VPN Traffic according to the Sophos KB article mentioned above

there is no policy based routing
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk over 4 years ago in reply to Fërd

Hi Fërd,

where does logviewer show your general internet traffic going?

Ian

XG115W - v20.0.2 MR-2 - Home

XG on VM 8 - v21 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 Keyur over 4 years ago

Hi Fërd,

Please take packet capture and check which firewall rule traffic passing- https://community.sophos.com/kb/en-us/123567

Regards,

Keyur
Community Support Engineer | Sophos Support
Sophos Support Videos | Knowledge Base | @SophosSupport | Sign up for SMS Alerts |
If a post solves your question use the 'This helped me' link
Cancel
Vote Up 0 Vote Down

Cancel
0 FormerMember over 4 years ago

Hi Fërd,

Is it possible for you to share screenshot of your IPsec connection profile? Do you have "Any" in Remote Subnet? I would also suggest you to run ping to 8.8.8.8 and take packet capture from Diagnostics on source IP address to see if traffic is trying to leave with out interface ipsec0.

Thanks,
Cancel
Vote Up 0 Vote Down

Cancel
0 Fërd over 4 years ago

Hi together,

a small update.
I figured out that the problem is general each VPN.

After around 5 minutes, no matter if Sophos Connect-VPN or IPSec-VPN is connected, the XG loses the connection to the internet.

The IPsec tunnel doesn't work anymore, if I'm connected via Sophos Connect, I can still manage the sophos over the website, but not more, no RDP or equal
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Fërd

Can you post some screenshots of your IPsec Policy / configuration?

__________________________________________________________________________________________________________________
Cancel
Vote Up 0 Vote Down

Cancel
0 Fërd over 4 years ago in reply to LuCar Toni

Hi,

here is the IPsec config:
Cancel
Vote Up 0 Vote Down

Cancel
0 Fërd over 4 years ago in reply to Fërd

and the policy
Cancel
Vote Up 0 Vote Down

Cancel
0 Fërd over 4 years ago

So, I opened a support ticket 8 Days ago, no answer till today…
Cancel
Vote Up 0 Vote Down

Cancel