Sophos XGS remote VPN to remote network

Hello redchat2435 ,

Thank you for reaching out to the community, have you created a VPN to VPN rule on HO ?

Hello Vivek,

I've not mentioned that in the remote VPN config, "use as dafault gw" is flagged. 

here's the VPN to VPN rule:

well if you want your ssl vpn users to have internet via FW, in that scenario you can toggle on the "use as default gw" option and if that is turned on, you'll also need a FW rule VPN to WAN !!

Can you enable the Log Firewall traffic option in the FW rule, and then perform a packet capture - https://support.sophos.com/support/s/article/KB-000035761?language=en_US

Here's trace from HO

and BO

Host 192.168.2.147 used for testin purpose is a Gigaset IP Dect and actually have an http web server

This rule id 12 on HO , can you show us a screenshot ?

This is rule no 2 and not rule no 12, kindly share again redchat2435 

Sorry, I got confused. Network Remoto Alghero 2  (192.168.2.0/24) 

Can you create a separate rules as such LAN TO VPN and VPN to LAN on the Top and mention the source/destination network as any.

Hello, sorry for late reply.

In the meanwhile, I made a lot of tries and I found a funcional configuration.

The only problem is that has worked since last week, and now isnt' working anymore. I'm attaching you all the screen of configuration, logs and pcaps.t

HO_Master_FW Configuration  

BO_Slave_FW Configuration

HO Pcap with error and

Logs with established conenctions highlited

Why it worked untill today? Any suggestion?

Thanks

From HO Fw I can't ping BO network, but from BO I can ping HO network. I think that the config above is correct, because it was working. 

From HO Fw I can't ping BO network, but from BO I can ping HO network. I think that the config above is correct, because it was working.