IPSec Site-to-Site VPN Local Subnet Becomes Unreachable due to Inactivity

Hi Nur Sakibul Huda Thank you for reaching out to the Sophos community team. Can you please confirm whether the existing settings on Sophos XG are configured as per the below KBA or not? If any of the steps are missing from the below KBA then apply it and confirm the status.

Sophos Firewall: Allow Remote Access SSL VPN traffic over an existing IPsec tunnel
https://support.sophos.com/support/s/article/KB-000037043?language=en_US

If existing settings are fine as per the above KBA then please check the stronswan.log around an issue time as per the below troubleshooting guide to get some clue and if required you may log a support case to validate it further.

Sophos Firewall: Troubleshooting site-to-site IPsec VPN issues
Sophos Firewall: Troubleshooting site to site IPsec VPN issues

Thank you for prompt response. We have checked the articles and our configuration is same as the given one. Our issue is not that the whole IPSec tunnel is failing. But rather only the subnet from which SSL VPN users connect is becoming non responsive and only after disable/enable the IPSEC tunnel it starts to work again. We have opened a support case now in this regards in SOPHOS support. Thank you again.

Cheers!

Hello Nur,

Can you share the Case ID you have logged?

regards,

Hi Emmanuel,

My Case ID is 06152659.

Thanks.

Hi Emmanuel,

My Case ID is 06152659.

Thanks.

Hi,

Thank you for sharing the case ID.

We notified the Case owner with regard to this case and will keep you posted.