This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Firewall specific IP's cannot be found via VPN.

Hello Together

We currently have a problem with the VPN. We have two Sophos XG 125w which are connected via VPN. The VPN rules have been created. From external via VPN I can access the internal LAN. Only certain Ips I can not ping. I have already tried to disable the Windows firewalls on the devices. Unfortunately, this has brought nothing. Internally I can ping the IP addresses without problems. Does anyone have an idea?

Thanks a lot

Translated with www.DeepL.com/Translator (free version)

This thread was automatically locked due to age.

Top Replies

Alexandre Da Costa1 over 3 years ago in reply to emmosophos +1 suggested

Hello We have now found the error. The problem was with the gateway on the PC. We are sorry. Thanks anyway. Alexandre

Parents

0 emmosophos over 3 years ago

Hello Alexandre,

Thank you for contacting the Sophos Community.

For the computers you are not able to Ping are you seen the Ping traverse the tunnel and get to the computer?

You can do a Packet Capture in the GUI of the XG to find out where the Ping is terminating.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 emmosophos over 3 years ago

Hello Alexandre,

Thank you for contacting the Sophos Community.

For the computers you are not able to Ping are you seen the Ping traverse the tunnel and get to the computer?

You can do a Packet Capture in the GUI of the XG to find out where the Ping is terminating.

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Alexandre Da Costa1 over 3 years ago in reply to emmosophos

Good day, thank you very much for the quick help. I have now run the packet capture. Attached the result. The source IP seems strange to me. Because I have a different IP externally.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 3 years ago in reply to Alexandre Da Costa1

Hello Alexandre,

Thank you for the screenshot.

In the Packet capture, you will see the Private IPs of the computers, not the Public IPs, in this case, because you captured for 192.168.0.220.

It seems for this the traffic is going into the IPsec.

Can you confirm what you see on the other end?

Regards,

Emmanuel (EmmoSophos)

Technical Team Lead, Global Community Support
Sophos Support Videos | Product Documentation | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'Verify Answer' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 Alexandre Da Costa1 over 3 years ago in reply to emmosophos

Hello

We have now found the error. The problem was with the gateway on the PC. We are sorry. Thanks anyway.

Alexandre
Cancel
Vote Up +1 Vote Down

Cancel