Routing to internal network doesn't work

You can cause routing problems if the subnet of "Internal (Network)" overlaps with the subnet assigned to VPN clients.

Cheers - Bob

Now i set the PPTP IP pool to the default address. Still doesn't work.

Would someone be able to check the configuration with me?

Does Accessing Internal or DMZ Webserver from Internal Network help?

Cheers - Bob

Unfortunately not (or maybe i don't really understand it).

Everything works as expected. It's just that i can't access local network devices via VPN and i can't ping external servers from the local network.

If there's no block shown in the Firewall or Intrusion Prevention log, it has to be a routing issue.  As an experiment, add a masquerading rule 'VPN Pool (PPTP) -> Internal'.  Can you now reach the internal devices?

Cheers - Bob

Didn't work. The only device in the local network i'm always reaching is the internal interface of the local network.

OK, it's time to start over at the beginning.  Show us the command you're using and confirm the remote access client is not in your internal network.  Start the Firewall Live Log, put your PPTP IP in the Filter box, touch enter and try your command.  If anything related shows up in the Live Log, show us the corresponding line(s) from the full Firewall log file.

Cheers - Bob

Ok, i took a screencast.

- I'm connected via PPTP

- 192.168.200.15 is the IP of the server

- 192.168.200.99 is the IP of the internal interface of the UTM

- I'm connected to the server via Teamviewer and i'm trying to ping anywhere

Hope this helps.

www.dropbox.com/.../sc_utm.mp4

Peter, I'm not comfortable following links to external sites.  We can't know if that is properly protected. The only malware I've gotten in over 10 years was from an external link to a picture in this forum several years ago.  Was there anything relevant in the Firewall Live Log?

Cheers - Bob

Peter, I'm not comfortable following links to external sites.  We can't know if that is properly protected. The only malware I've gotten in over 10 years was from an external link to a picture in this forum several years ago.  Was there anything relevant in the Firewall Live Log?

Cheers - Bob

Not really.

I could also send you the screencast via mail if that's better for you? It's 17MB though.

So, i solved the problem. I reset to factory default and set it up again. Now everything works. Now idea why, as the rules are pretty much the same.

Thanks for the help though!

I'm glad you had that option - congratulations, Peter!

Cheers - Bob