Sophos Connect and LAN Access

Do you have a simple network - which I would define as a network where the default route (eventually) goes via your Sophos firewall? If not, you may find that your internal router doesn't know where traffic to your VPN subnet should be routed. In that case you'll need to configure your internal router to send the VPN subnet to the Sophos internal interface (the "next hop"). You or someone else might have done this years ago for L2TP.

Hey David

Good points however my XG is the Gateway and no Routers used.

I would expect not to connect if it was that as well where I connect and can browse the XG on the LAN interface but thats all :-(

Hello M8ey,

Are you able to check if the routing table on your machine has been updated after being connected? On Windows, you could run the command in cmd. > route print and check if the gateway has a higher priority?

cmd. > route print and check if the gateway

The 172.20.10.8 is my IP before connecting to the SC

10.3.24.50 is my IP from the VPN within the XG

Hello M8ey 

Is the screenshot taken after connected to SC? It does seem that your local gateway has the higher priority and the network for gateway 10.3.24.50 does not have 'any' route added. 

Sure is - Active SC Connection and then ran the check.

Hello M8ey,

The best thing to do a packet capture on the firewall. From Monitor & Analyze->Diagnostics page setup a packet  capture. You can configure the host <IP> and start the capture. Then ping that host and see what you get. You should be able to see if the packet is dropped at the firewall or sent out the correct interface and if it getting a reply.

Please let us know

Ramesh

Hello M8ey,

The best thing to do a packet capture on the firewall. From Monitor & Analyze->Diagnostics page setup a packet  capture. You can configure the host <IP> and start the capture. Then ping that host and see what you get. You should be able to see if the packet is dropped at the firewall or sent out the correct interface and if it getting a reply.

Please let us know

Ramesh