Reaching a network "before" a XG via VPN Site2Site Tunnel

Hi GernotMeyer,

Add the DMZ network in the Local Network tab in the IPSec policy; of the Office Sophos and the same DMZ network in the Remote Network tab in the IPSec policy of the Datacenter Sophos. Define VPN to DMZ and DMZ to VPN rule on both side of XGs and that should be enough.

Thanks,

Hi,

tried this. Thanks.

VPN Site2Site shows up all networks new networks green on both sides.

I can see the packets leaving the datacenter (log view).

I cannot see them arriving at the office destination.

A tracert indicates, that the traffic is forwarded through the tunnel.

No idea, why nothing arrives at destination.

Did it!

Rule on datacenter WITHOUT NAT config.

Rule in destination XG need to have NAT in place.

Thanks for help!

Thanks for the notification, can you please make your  answer as a solution. 

Thanks,