Routing RED Remote Network through Head Office IPSEC VPN

Question

Hey All, 
 Hopefully you can help me . 
 
 I have a RED device connected to an XG FW, 
 The RED remote subnet is: 192.168.10.0/24 
 Local on HO : 192.168.0.0/24 
 IPSEC Tunnel remote subnet : 10.22.22.0/24 
 
 I have FW rules that allow me to ping the : 192.168.0.0 network not problem. 
 But when adding it for the VPN I just cant get that to work. Any ideas ?

The above didnt work 
 
 I then did something like the ssl vpn setup , NATing the vpn rule to internal ip: 192.168.0.254 (192.168.0.0 works over the vpn , SSL VPN works with this method )

lferrara · Answer

Hi Ryan, 
 how is the RED configured? Trasparent, Split or Unified? 
 This is crucial to route the traffic. 
 If the RED is not in unified mode, you need to add into RED tunnel the VPN remote network also. 
 In the S2S VPN Tunnel, you need to add as local network the RED Network. 
 Regards

LuCar Toni · Answer

SNAT will not work for IPsec Traffic as Policy Based. SNAT would be only possible within the IPsec Policy (Drop down). https://community.sophos.com/kb/en-us/123356 
 Can you switch to VTI (Route Based VPN)? In VTI you can use the Policy (V18).