SSL VPN Client is able to connect to Head Office but cannot connect to Branch

Hi Veredy Tang 

In your IPsec connection between the head and branch office, did you make sure to include the (head office) SSL VPN network as part of the IPsec tunnel connection?
Also remember to create a firewall rule allowing SSL VPN network traffic on the branch office firewall as well.

This is similar to a Hub and Spoke IPsec VPN setup.

Regards,

Hi,

Actually the tunneling working fine between 2 location if we are using the network in both location.

the issue is:

when we are in public area and connecting to Head Office Network using SSL VPN Client, it can only connect to Head Office Network but cannot go to Branch Network.

Thanks.

Did you have the BO in permitted Networks of SSL VPN? 

Sorry for this stupid question. What is BO?

Branch office. 

This is my firewall rules in branch office

Head-BO : Source : VPN, Destination : LAN

BO-Head : Source : LAN, Destination : VPN

Is there anything missing?

I am talking about the SSL VPN Config. 

Can you show us your config there? 

This is in Head Office:

In Branch, I dont create SSL VPN Policy.

Is the BO Network in Permitted Network Resources? 

Yes, it is.

Mh - this does not make sense.

Those objects in the firewall rule are quite different to the SSL VPN Config objects.

I think you have to double check everything.

The Firewall Rule (VPN to BO) have to be there. And the same network, you want to reach in BO have to be in SSLVPN. 

Mh - this does not make sense.

Those objects in the firewall rule are quite different to the SSL VPN Config objects.

I think you have to double check everything.

The Firewall Rule (VPN to BO) have to be there. And the same network, you want to reach in BO have to be in SSLVPN.