No response from gateway

Question

Sophos XG XGS116 (SFOS 20.0.2 MR-2-Build378) has problems with ipsec vpn. 
 The Sophos Connect client shows "No response from gateway [Adress]" 
 So we took a look on the firewall at "Administration" and "Device Access". Here we have IPSec selected. 
 There are also two site-2-site ipsec vpn running, showing no error. 
 Access via Sophos VPN Portal is also posible. 
 As you se there&acute;s no blocking of port 500 by the isp and the gateway address is correct. 
 What can be the problem?

Erick Jan · Answer

Hi Gerald, 
 Thank you for reaching out to Sophos Community. 
 Can I inquire what Firewall firmware version you&rsquo;re using? 
 Was the tunnel newly established? 
 Are there any IKE packets from the client to port 500 or port 4500? you may check in advance shell and do the following command 
 tcpdump "port 500 or port 4500" 
 
 Are there VPN - WAN Firewall rules/ 
 NAT, if the upstream is blocking/dropping 
 
 Check also via packet capture and drop rules to give us further insights. 
 You may also refer to the following troubleshooting 
 https://docs.sophos.com/nsg/sophos-connect/help/en-us/AboutSophosConnect/Troubleshooting/EventErrors/index.html

Sreenivasulu Naidu · Answer

Gerald Werner , This is probably the reachability issue from your Windows to SFOS. Please check if there is a NAT device in the nexthop of your Windows (RA client) or next to your SFOS that does NAT; try pining the wan ip (where IPsec RA is configured) from your Windows, do a tcpdump on your SFOS if the ping or port 500 while attempting IPsec RA connection from SCC.

No response from gateway

Top Replies