VPN Site to site no ping on one way

Hello there,

Thank you for contacting the Sophos Community.

Can you share a screenshot of your DoS & Spoof protection (Protect > Intrusion Prevention > DoS & Spoof Protection)?

And any reason you are using a SSL tunnel instead of an IPsec?

Regards,

Hi,

I'm using SSL VPN to be ready future implementation of ACLs for every single user.

Hi Federico Piu : Based on the "route -n" output on XGS87w I can see 10.81.234.0 is reflecting twice via tun0 and tun21. This means XGS87w which is acting as in SSL VPN client (for SSL site to site) has reachability to the same network via 2 tunnel interfaces. Due to that probably in traffic and out traffic is marking via different tunnel interfaces and traffic is getting marked as in "IP_Spoof".

This can only happen if both the XGS which are part of the SSL site-to-site tunnel has the same "Assign IPv4 addresses" network settings inside the SSL VPN settings.

i.e. XGS87w has assigned an IP pool from network 10.81.234.0 via tun0.

And while you make this XGs87w as in SSL VPN client by adding an SSL VPN Server file ( file of XGS107w) it has added the same network 10.81.234.0 route via tun21 as XGS107w has the same network 10.81.234.0 in SSL VPN Assigned IP pool settings.



So changing the network to any one XGS end ( more preferable would be where no users are using Sophos SSL VPN remote access or fewer users using Sohps SSL VPN remote access) will avoid duplication in tun network settings and will fix the issue.