Problem: Accessing internal services over VPN

Hello !

at the moment I'm troubling with the VPN/Firewall configuration. I've the following setup:

- FritzBox 7490 DSL (WAN)<--->(LAN) Sophos XG

- Setup SSL VPN (Remote Access) in Sophos

- UDP based

- Port is opened in the FritzBox,

- FW rule routes traffic

- Connected to the VPN successfully (able to ping internal IP's)

- Server in local network

- Running simple web server with docker on port 9090

-> accessible from internal and over VPN

- Running another docker service on port 8080

-> internal: accessible

-> over VPN:

Most of the time:

- first request (http://10.0.255.100:8080) from browser gets 302 (Found, redirect to /auth/login?next=/)

- second request (redirect to "10.0.255.100:8080/.../login is loading infinitely (until timeout)

Sometimes it is working and I can access the service

- Logs in Sophos show a lot of "Could not associate packet to any connection" errors

- Server and clients are running on Ubuntu 18.04

 

In my opinion there might be a problem with the FW that it filters specific packages from the request, but I'm not 100% sure. Does anyone have an idea what might be the issue ?

 

Thank you in advance!

 

EDIT:

 

I'm also able to curl 10.0.255.100:8080 (Screenshot 1), but if I curl 10.0.255.100:8080/.../login redirect url) it is loading infinitely (Logs in Screenshot 2 & Screenshot 3)