Firewall blocking

Hello,

I assume you mean to configure an SSL Site-2-Site Tunnel.

You could use a different port, like 1443 or 9443.

You can change the port at Site-to-Site VPN / SSL / Settings / Port. Of course you need to change this on both sides.

Hello Dhanalakshmi,

Thank you for contacting the Sophos Community!

Please confirm what type of tunnel you are using.I

f the UTM is blocking this IP via the Web Protection, make sure you go to Web Protection >> Filtering Options >> Misc >> Transparent Mode Skiplist >> and add the IP under Skip Transparent Mode Destination Hosts/Nets

Also if you run the following command from the shell of the UTM, what interface does it point to?

# ip route get x.x.x.x (x.x.x.x is the IP you are trying to access) 

Regards,

ip : Die Benennung "ip" wurde nicht als Name eines Cmdlet, einer Funktion, einer Skriptdatei oder eines ausführbaren
Programms erkannt. Überprüfen Sie die Schreibweise des Namens, oder ob der Pfad korrekt ist (sofern enthalten), und
wiederholen Sie den Vorgang.
In Zeile:1 Zeichen:1
+ ip route get 10.35.32.20
+ ~~
+ CategoryInfo : ObjectNotFound: (ip:String) [], CommandNotFoundException
+ FullyQualifiedErrorId : CommandNotFoundException

I added the IP in the Transparent Mode skip list. We are using IPSec Site to Site VPN (IPSec Tunnel mode)

IPsec site 2 site Tunnel connection already established but still IP cannot be accessed

OK - IPsec, then.

Can you ping the IP you want to reach?

Could you supply a simple diagram of your setup and networks?

Rgeards,

Philipp

Yes I can ping the IP and ping is successful

Hello,

there is no need to obfuscate private IP networks, this makes it only harder to help you.

I understand that you hide the WAN adresses, but how could we give an advice with this little info?

Regards,

Philipp

Again: which IP in which network do you ping?

- Philipp

Hello Dhanalakshmi,

Sorry, I am unable to understand what you wrote.

Did you run the command IP route get 10.35.32.20 on the shell of the UTM?

utm1:/root # ip route get 8.8.8.8
8.8.8.8 via 216.232.49.1 dev eth1 src 216.232.49.2
cache

Are you trying to access via the IP or a FQDN when you type in the browser?

regards,