Reflexion will be End-of-life on March 31,2023. See Sophos Reflexion EoL FAQs to learn more.
at the moment we have an IPSec VPN setup (and it's up and basically green).On our local side we have several VLANs defined, like 10.1.10.x/24, 10.1.20.x/24 and so on. Basically all of our local networks are defined within 10.1/16.On the remote side we want to connect 10.255/16 and 10.195/16, which we don't use.Now for the IPSec VPN locally, I defined a new Network Object w. 10.1.0.0/16 which I added.Now we're trying to receive traffic from 10.255.254.121 (ping) to 10.1.10.5. But we don't receive anything, although the remote side is sending (can confirm this).We have auto firewall-rules active including packet logging, but we don't see anything. Can anyone help me out? Is this Network Object maybe an issue? Also No NAT is used atm.Thank you!
Ok I found a solution. The policy was wrong, although "working" as it wasn't "strict" and used AES-CBC but GCM was configured. By correcting this, it works.