[Resolved]:UTM 9 IPSec VPN can't resolve DNS internal hostnames

Question

Hello, 
 using a UTM 9. 
 VPNSSL connections from Sophos connect are configured and worked well. 
 I create a VPN IPSec connection always from Sophos connect. 
 The connection establish, I can see in the Sophos connect client the DNS and the domain name suffix configured in the UTM. 
 I can ping the network allowed in the UTM, put I can't resolve the internal hostname with or without domaine name suffix. 
 If I lookup a internal hostname, the DNS server is our internal DNS server configured, but it times out. 
 So why the VPNSSL can resolv internal hostname and not VPN IPSec ? 
 Thank's. 
 Regards. 
 Fred.

Frederic STOCK · Answer

Hello, 
 I thought I had checked "Automatic firewall rules", but not. 
 So the DNS request didn't pass the FW. 
 After creationg FW rules, it works well. 
 Regards. 
 Fred.