Firewall blocking

Hello Dhanalakshmi,

Thank you for contacting the Sophos Community!

Please confirm what type of tunnel you are using.I

f the UTM is blocking this IP via the Web Protection, make sure you go to Web Protection >> Filtering Options >> Misc >> Transparent Mode Skiplist >> and add the IP under Skip Transparent Mode Destination Hosts/Nets

Also if you run the following command from the shell of the UTM, what interface does it point to?

# ip route get x.x.x.x (x.x.x.x is the IP you are trying to access) 

Regards,

I added the IP in the Transparent Mode skip list. We are using IPSec Site to Site VPN (IPSec Tunnel mode)

OK - IPsec, then.

Can you ping the IP you want to reach?

Could you supply a simple diagram of your setup and networks?

Rgeards,

Philipp

Yes I can ping the IP and ping is successful

Hello,

there is no need to obfuscate private IP networks, this makes it only harder to help you.

I understand that you hide the WAN adresses, but how could we give an advice with this little info?

Regards,

Philipp

Hello,

there is no need to obfuscate private IP networks, this makes it only harder to help you.

I understand that you hide the WAN adresses, but how could we give an advice with this little info?

Regards,

Philipp

Again: which IP in which network do you ping?

- Philipp

Hello jprush,

Thanks for reply. Adding Web Protection >> Filtering Options >> Misc >> Transparent Mode Skiplist >>  worked .

When i tried accessing the IP as URL it is downloading the .jnl (jinitialtive file) instead launching the application

Hello,

when you can reach that IP behing the tunnel and "something" is happening when you use a browser to access the device carrying that IP, then there is nothing more you can do from the firewall side. Your browser is able to reach that device, basta. The Sophos isn't involved further...

But I have to say something: I tried to tell several times that you shouldn't make it so hard for others to help you.

Out of 100% Information you already have, you give 10% to the forum, which is like we have to use a crystal ball.

We are mainly volunteers here giving help to other users. I would like to use as little effort as possible to help you out.

Regards from Germany,

Philipp

Hi Philipp,

Sorry about technical miscommunication and not giving enough information because I am new to Sophos UTM . To brief overall problem I faced  IPSec  tunnel established between site A and Site B.  But the IP of Site B was not accessible from Site A because it was blocked by firewall web filtering . I have added the IP in Transparent Mode skiplist as suggested in this forum. It worked and downloading the .jnl file instead launching the application which is because of java issue assosiated with web browser and application.

The firewall thing is sorted. Thank you for the help