Putting clients on RED and LAN onto same network

Hi,

I want to put all clients at a remote site on the same LAN as the main site.

LAN1 <-> UTM 9.7 SG210 <-> Internet <-> RED 15 <-> LAN1

I have followed this article https://community.sophos.com/kb/en-us/115668

The clients at the remote site receive an IP address via DHCP, but don't seem to have connection to anything else.

In the firewall log I see packets from the client at the remote site are marked as Spoofed packets.

If I turn off spoof protection I get connectivity between sites, but not to the internet.

IPS and ATP logs show nothing.

Any ideas?