Remote Access IPSEC - tunnel connects but unable to access any devices

Question

I have configured Remote Access VPN - IPSEC and I am able to establish a connection via the Sophos Connect app. 
 However, I am unable to talk to any LAN devices connected to the Sophos XG 125W. 
 Here are my configuration settings: 
 1. Remote Client connecting via Sophos Connect app 
 - Local subnet: 192.168.5.X/24 
 - OS: Win11 (fully up to date, no 3rd party AV or firewall in place) 
 
 2. Sophos XG 125W Network 
 - OS: SFOS 20.0.1 MR-1-Build342 - Sophos XG 125W IP: 192.169.0.253 
 - Local Network - 192.168.0.X/24 
 - DNS Server IP (Windows Server Standard 2022): 192.168.0.10 
 - Sophos IPSEC Config: 
 
 VPN Firewall Rule 
 
 Device Access ACL

Mayur Makvana · Accepted Answer

Hello Aaron, 
 Thank you for your time over chat. 
 We found that the traffic was getting dropped under the IP Spoof. While reviewing, we could see that the SSL VPN is also having the same lease range configured. We suggested changing the lease range for the SSL VPN or an IPSec to get the things working.

Mayur Makvana · Answer

Hello, 
 Thank you for sharing the detailed information. 
 Please check whether the route added to the windows or not by running below command from windows CLI. 
 C:\>route print 
 If you can point that the route of 19.168.0.X added, follow below KBA: 
 community.sophos.com/.../sophos-firewall-how-to-identify-the-communication-issue-with-up-and-running-ipsec-tunnel

Remote Access IPSEC - tunnel connects but unable to access any devices

Top Replies