IPSEC Site to site conneted

After disabling NAT-Rules ... if the problem stays existent (there are no hits at the NAT rules, so i think it is not source of the problem)

Is there an additional firewall (or other restricting router) in front of one of the firewalls?  (Problems seen with Cisco - IPSec Inspection)

XGS at both locations? Which version do you run at the systems?

There is an IPSec change, which my generate problems you describe.

(Tunnel is up but no traffic through tunnel)

After disabling NAT-Rules ... if the problem stays existent (there are no hits at the NAT rules, so i think it is not source of the problem)

Is there an additional firewall (or other restricting router) in front of one of the firewalls?  (Problems seen with Cisco - IPSec Inspection)

XGS at both locations? Which version do you run at the systems?

There is an IPSec change, which my generate problems you describe.

(Tunnel is up but no traffic through tunnel)

Yes the tunnel is up but i cant ping either ends. i have xgs at remote site and HQ all running same firmware 20.02. i dont have any rules all i have is VPN rule and Main_Lan to Wan All access rule that is all i have. so i dont know what is blocking access

I would recommend:

Packet capture at both sites. with filter = both external ip's ( BPF-String:  host xx.xx.xx.xx and host yy.yy.yy.yy  )

What type of packets do you see ?? (IKE=500  && ESP or 4500 ??)

I had a chat with sophos and they said its because my LAN bridged that is why am experiencing this 

"LAN bridged" ?
do you have a simple network sketch?

172.20.60.1/24 and 172.30.6.0/24 are the IP ranges on the LAN side (where the switch is located)?

Where is the Bridge?

This is the bridge   "Ipsec is not supported directly on bridge as source interface as Zone type is not applicable for bridge. "

Hello there,

Can you share the Case ID, you have opened for this issue?

Regards,

case id:01933661 

Checking on your case, I don't see any note about this; I only see in the ticket you have a scheduled call to go over your issue. Can you clarify who from Sophos did you talk to about this?