Lan to Lan traffic blocked

Question

I am working to setup a firewall and facing strange issue. The configuration is as follows: 
 Firewall and Other Servers are hosted in subnet: 172.16.100.x 
 Clients are hosted in various subnets like 192.168.x.x, 10.10.10.x 
 Top Firewall rule is to allow traffic between Any LAN zone device to Any LAN zone device 
 
 Network setup: 
 The core switch has a static route of 0.0.0.0 and gateway as XG Firewall 
 
 However, I am able to access the firewall from my clients but none of the other servers that reside in the same network as the firewall. Any help is much appericiated.

Mayuresh Bhagwat · Accepted Answer

Thanks for the support, the issue is resolved now. 
 The issue was due to asymmetric routing. The solution was to add an advanced firewall rule from the server subnet to the user subnet i.e. one way rule only. We also tried adding bi-directional rule but that took off the internet access, hence only one-sided rule.

FormerMember · Answer

Glad to know that you identified an issue and resolved it. 
 Click here to know more information on 'Asymmetric routing design condition'.

Lan to Lan traffic blocked

Top Replies