XG v18 - branch office users authentication with head office AD

Actually it should work directly with VTI (Routebased VPN).

In Policy based, the XG does not know the route to the BO. So you had to place a route for own traffic.

In VTI, you have a interface, which should work for system own traffic, if you put a route (Static or SD-WAN). 

Check which route precedence is hitting for you. 

http://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/concepts/PolicyRouting.html

Hi LuCar,

I logged two threads as to my knowledge I can only ask one question per thread. However the issue may actually be the same as I find that the actual issue is that the XG itself cannot communicate with the remote tunnel. This thread is no longer be required.

Thanks.

WA