Remote Access IPSEC - tunnel connects but unable to access any devices

Hello,

Thank you for sharing the detailed information.

Please check whether the route added to the windows or not by running below command from windows CLI.

C:\>route print

If you can point that the route of 19.168.0.X added, follow below KBA:

community.sophos.com/.../sophos-firewall-how-to-identify-the-communication-issue-with-up-and-running-ipsec-tunnel

Hey Mayur Makvana 

This is my route print from the Windows client machine running Sophos connect:

Hmm strange, I don't recognise gateway: 169.254.128.128
(Remote client gateway is 192.168.5.1) (Sophos XG is the gateway at the other end which is 192.168.0.253)

Hello,

This looks fine, can you please collect the tcpdump and drops simultaneously while pinging to the local LAN?

console> tcpdump ' host internalIP and proto ICMP

console>drop-packet-capture ' host internalIP and proto ICMP

From CLI I ran: tcpdump ' host internalIP and proto ICMP

And get this:

However, when I run: drop-packet-capture 'host internalIP and proto ICMP'

I get command not found

Hello,

I could see that the traffic reached to the firewall. It may have dropped or forwarded. 

Can you please DM with the Sophos Access ID?

Hello,

I could see that the traffic reached to the firewall. It may have dropped or forwarded. 

Can you please DM with the Sophos Access ID?