SSL Site to Site VPN: Can only ping some endpoints

Hi Bradley,

I would recommend running a packet capture on the Firewall and sharing the screenshot.

• Diagnostic > packet capture on the destination IP
• Use BFP string: host<IP Address your pinging > and ICMP
• Also, compare this to working (Ubiquiti/IP phones)

• Monitor traffic using Packet Capture Utility in the Sophos XG Firewall GUI

Pinging 192.168.100.5(Ubiquiti AP) in first reply works. Pinging 192.168.100.241 (PBX) fails/times out on PC ping

Hi Bradley,

Can you also share a screenshot of the log viewer upon pinging the PC's and the FW rule ID 4

Also, any other services affected that can't be reached?

can you post a screenshot of the VPN config and profile? Hide sensitive details please.

are both sides Sophos Firewall?

I had once and still have a similar issue on one VPN connection - it is working but there are intermittent connectivity issues when compression is not enabled on the VPN Profile.

LHerzog, thanks yeah compression enabled on both sides. Seem to have figured it out, its the endpoint anti-virus blocking the connection. 

LHerzog, thanks yeah compression enabled on both sides. Seem to have figured it out, its the endpoint anti-virus blocking the connection.