Sophos Auth. Server AWS VPC VPN

Hi,

I setup AWS VPN to our Transit Gateway.

It all works fine, but the UTM itself is not able to access the tunnel.

We're running a Managed Directory in AWS and several servers. The plan is to use the Managed AD as an Auth. Source for Remote VPN.

I configured it, but the utm tells me Could not reach...

If i'm pinging from UTM console (or web interface) to an AWS Server it times out.

If i'm pinging from an AWS Server to the UTM it works.

I checked routes on UTM console, and the subnet is set to BGP Address. (Routes should be fine, otherwise i wouldn't be able to ping from AWS to UTM)

Hope anybody can help me!