VPN traffic is not passing through the vpn tunnel

Question

Good day 
 
 l have create a site to site to vpn , the vpn is up , but we cannot ping the branch site 
 On the head office there is ospf configured, and if we trace route from the firewall it's showing that the traffic is going through the ospf vpn of the ISP. 
 
 we have created the firewall rules , they are on top. 
 the route precedence is SD-WAN, VPN , static . 
 the trace route going through the ospf vpn

Erick Jan · Answer

Hi Anesu, 
 Thank you for reaching out to Sophos Community. 
 I would recommend checking the following. 
 
 check the drop packet/packet capture 
 
 Sophos Firewall: How to troubleshoot dropped packets 
 drop-packet-capture

Is the route correct for both sides' traffic? Are the priority correct(static, OSPF, and SDWAN) 
 If traffic is being translated (NAT), correct the translation. Do both sides have the same network configuration? 
 Can the Firewall can't ping other devices on the other side of the VPN? or only the one you're testing 
 
 For more reference, kindly see kb's below. 
 
 Sophos Firewall: Traffic is not passing through the VPN tunnel 
 Sophos Firewall: Troubleshooting site to site IPsec VPN issues 
 NAT with route-based IPsec when local and remote subnets are the same

VPN traffic is not passing through the vpn tunnel

Top Replies