SSL VPN: Access to SSL Client side

Question

There is a SSL VPN client connection to a Sophos XG Firewall. The Connection is fine. From the client side i get access to the XG Firewall local LAN. Now i need also access from XG Firewall local LAN to the Client LAN. 
 I have two Firewall Rules. 
 - VPN to LAN - LAN to VPN 
 What else do I need. 
 Thank's community.

lferrara · Answer

Marcel, 
 did you follow this kb? 
 https://community.sophos.com/kb/en-us/122769 
 You only need VPN to LAN and not vice-versa. 
 Regards

KingChris · Answer

Hi Marcel Ruch 
 Based on the data you provided, I see you are using a bridge interface. Is this correct? Are you actually trying to bridge 2 networks together or are you just plugging in the ports assigned in the bridge? I would recommend you remove the bridge interface and setup the LAN interface on the correct port. Please note that doing this will remove the IP from the bridge interface, so you will need another IP on the XG to connect to. 
 On another note, have you disabled windows firewall on the ssl vpn client side? Windows firewall always blocks pings out of the box. Also to note that if you are not using a full tunnel and the user on the other end has the same IP range on their LAN network as your LAN network, then this will cause problems. 
 Try changing to a full tunnel on the XG SSL VPN and disabling windows firewall completely to see if it helps. I also recommend having a rule VPN-LAN and LAN-VPN without routing or MASQ applied. You can also try pinging the end system from the XG. If there is no response to the XG, then the problem lies on the end client device. 
 Thanks!