XGS87 (SFOS 20.0.2 MR-2-Build378) VPN Routing Problem

Sorry for my bad English.

Hi,

Thank you for reaching out to Sophos Community.

I recommend checking the routing table on the Sophos Firewall to ensure that there is a route for the cloud network that directs traffic through the IPsec VPN tunnel.

You may do a packet capture on the XGS and the SSL VPN client to analyze the traffic flow.

Also, you may check the following KB 

• Sophos Firewall: How to prioritize the traffic via SD-WAN for the applications

Likely you need something like a DNAT Rule or you can adjust the IPsec tunnel.

The ipsec tunnel only routes the traffic matching the local and the remote network (in your case LAN and the Cloud resource). 

You can adjust both sides of the tunnel and add the SSLVPN tunnel to it. This will work.

If you cannot do this, you need to work with a SNAT and masq, which requires more adjustments. 

I assume you are using policy base s2s IPsec tunnel on XGS; Ensure SSLVPN RA IP pool (that you configure in SSLVPN global settings) subnet is configured in the local subnet of IPsec config on XGS and in the remote subnet of IPsec gateway of Cloud. Please verify this config and let us know if SSLVPN RA user can access your cloud resources.

Hello the SSLVPn Network was missing in the site to site tunnle settings. Now i added it:

But sadly  this phase two connection will not be established 

I have made a friend request to you on your name in the community page; pls accept it or DM me on sreenivasulu.naidu@sophos.com, need to check your logs and configs on sfos and on the cloud gw.

Hello Thank You after a while we found a few missing options on the OPNSense we had to activate Tunnleisolation and we had to make a few changes at the firewall but now every hing is running. 

Thank You all for the help.