IPSec Tunnel up, but not pinging

Hi Ajay,

Please check the firewall, you must allow internal IPs at both Firewall through each other.

Hope it can help you

Firewall rules are set for LAN to VPN & VPN to LAN with the respective subnets.

Hi Ajay,

Please send live log of VPN to here. I think we can find issues together.

Please refer article: https://community.sophos.com/products/xg-firewall/sophos-xg-beta-programs/sfos-v170-beta/f/sfos-v170-beta-issues-bugs/98065/site-to-site-vpn-connectivity-issue-between-sophos-xg-16-05-6-mr-6-firmware-and-17-0-0_ga-sfw-80

Some issues will occur if you connect VPN IPSec with SFOS v17 and v16.5

Hi,

In Administration | Device Access | VPN | check if PING is selected. Verify the network subnets are defined properly in the IPSec policy on both the end. 

Check #1.1 in my troubleshooting guide and see if the traffic is passed through the IPSec tunnel. PM me a screenshot to see the packet communication.

Thanks,

Sachin, please move this thread to the proper XG forum.

Cheers - Bob

Bob, I have moved the thread. 

Ajay Sharma1 I have moved it in the XG group's VPN forum to get more attention.

Thanks,

Thanks Sachin,

I've tried re-configuration of Tunnel. Static Routes / Even Policy Routes, but to no avail.

When I trace from Any of the ends the packets get lost after 5 -8 hop. I feel like contacting my ISPs as at both ends we have different providers.

Also, Have I mentioned that one end is Cyberoam with 10.6.6 and Sophos XG 105 with 17.0.6 MR-6. Could this be a reason for no traffic. Policies I'm using.

If you did a packet capture as I suggested in my previous response did you see the traffic flows from/to the IPSec interface of both firewalls? If yes, then you must get your ISPs to investigate the issue further. 

Thanks,