SSL VPN Full Tunnel: Bad Routing?

Question

It appears that my "full tunnel" is more like "half tunnel" 
 Based on route print output (Windows), only the 0.0.0.0 - 128.0.0.0 addresses are routed via the VPN interface 10.20.30.3 (see below line 2). The rest exits through the local gateway (line 1) 
 Network Destination Netmask Gateway Interface Metric
 0.0.0.0 0.0.0.0 192.168.1.254 192.168.1.83 35
 0.0.0.0 128.0.0.0 10.20.30.1 10.20.30.3 258 
 Sophos Connect 2.3.2.0927 
 SFOS 21.0.0 GA-Build169 
 
 Looks like a bug to me. Thoughts?

m@x · Accepted Answer

The issue seems to have disappeared after client reboot because now I see the second record added successfully: 
 128.0.0.0 128.0.0.0 10.20.30.1 10.20.30.3 258 
 And the traceroute of the IP addresses 128.0.0.1 and above displays proper routing, via the VPN gateway. 
 Seems like a hiccup. Topic may be closed.

SSL VPN Full Tunnel: Bad Routing?

Top Replies