IP-Sec Site to Site XG to XG Headoffice not pinging Branch Office Resources

Question

Hey, 
 
 I have setup IP-Sec between head office and branch office few days back. My branch office is working perfectly fine and accessing all the resources on the head office but on the other hand when i try to access or ping any resource on branch office from the head office its not connecting even i'm only able to ping local gateway on branch office (172.16.16.1). 
 
 My Head Office Network is 10.0.0.0/8 
 My Branch Office Network is 172.16.16.0/24 
 
 Please suggest me any solution so i can proceed further.

KingChris · Accepted Answer

Hi Rafay Saeed 
 You will need to check your firewall rules on the head office. 
 For IPsec firewall rules, you should not have any NAT or routing policy set. You can however set app, web and IPS policies on it. 
 Your PCs on branch office site might have windows firewall enabled which always blocks pings by default. I would suggest pinging something that does not block ping. 
 If you can ping branch office XG from head office LAN, then I suspect there is nothing wrong with the XG but something wrong locally. 
 
 Thanks!