Doesn't ping AD server when I connect with SSL VPN

Hi SAVAS

Please troubleshoot the issue by created a test SSL VPN Policy with test user and connect with Sophos Connect client as per the below kba link : 

https://docs.sophos.com/nsg/sophos-firewall/18.5/Help/en-us/webhelp/onlinehelp/AdministratorHelp/VPN/RemoteAccessVPN/VPNRemoteAccessSSLVPNSophosConnectClient/index.html#specify-an-ip-address-range-for-ssl-vpn-clients 

Share the feedback that you get under Sophos Connect client 

Thanks and Regards

hello Brahat,

exactly the same settings but I still can't ping my AD server after SSLVPN is connected

I can ping AD server over local network

When I look at Packet capture, I come across such a table:

The ping goes to the server, but the ping from the server does not go through the sophos. If you pay attention, it cannot find any rules on the return.

what is your opinion about it?

Please make sure you have vpn to lan rule configured 

Also share the network you need on Sophos Connect client ?

Regards

kural zaten çalışıyor:

ayrıca AD'ye zaten izin verildi:

tüm izinler zaten verildi

ARP NDP paketleri dikkatimi çeken sunucudan geliyor. ve sophos bu paketlere izin vermiyor

ayrıca aynı ağda farklı bir IP adresine zaten ping atabiliyorum. Tek fark, paketin farklı olmasıdır.:

For a test created another firewall rule from VPN to LAN with source and destination network any and keep on TOP of all firewall rule 

Do you see network or IP address  on Sophos SSL VPN Connect Client ? as below : 

Sign in to the command-line interface (CLI) and select 5: Device Management, then 3: Advanced Shell, and run the following command:

tail -f /log/sslvpn.log

For a test created another firewall rule from VPN to LAN with source and destination network any and keep on TOP of all firewall rule 

Do you see network or IP address  on Sophos SSL VPN Connect Client ? as below : 

Sign in to the command-line interface (CLI) and select 5: Device Management, then 3: Advanced Shell, and run the following command:

tail -f /log/sslvpn.log

Try to download the SSL VPN file from Public IP with user Portal 

this answer solved my problem 

I downloaded the user file from the Public ip address and now I can ping the AD. Thank you very much for your help. you are a perfect man Bharat J