Firewall Drop several initial packet from vpn site to site

RE: Firewall Drop several initial packet from vpn site to site

Tri Nguyen2 — Mon, 14 Aug 2023 04:57:57 GMT

I have try to bypass stateful firewall from subnet 172.16.0.0/12 to attendance ip 10.16.16.199 via conssole and it work now.

set advanced-firewall bypass-stateful-firewall-config add source_network 172.16.0.0 source_netmask 255.240.0.0 dest_network 10.16.16.199 dest_netmask 255.255.255.255

RE: Firewall Drop several initial packet from vpn site to site

Bharat J — Mon, 31 Jul 2023 11:33:13 GMT

Hi Tri Nguyen2

You may refer below link to troubleshoot the issue

https://doc.sophos.com/nsg/sophos-firewall/19.5/help/en-us/webhelp/onlinehelp/AdministratorHelp/SiteToSiteVPN/Troubleshooting/S2sVPNIPsecTroubleshootCommonErrors/index.html

Regards