VPN IPSEC ping is working in one way direction

Hi Sophos User825 

Please verify LAN to VPN and VPN to LAN firewall rule at Site B, please also tweak MASQ/NAT in VPN to LAN firewall rule to check, you may utilize the packet capture - https://community.sophos.com/kb/en-us/123189.

Please try to capture traffic on IP address of Site A at the packet capture of site B.

Hello i would like to thank you for your reply 

may i tweak  MASQ/NAT in VPN to LAN firewall in both SOPHOS or just Sophos B ?

Hi Sophos User825 

First, try with the site which resources are not accessible from remote end.

Hi Sophos User825 

First, try with the site which resources are not accessible from remote end.

Heloo i did add the nat MASQ nut allways the same issues.

Hi Sophos User825 

I would suggest you to take packet capture on both firewalls to track traffic from site A to B and find out where it is being dropped/blocked. 

Please follow this KB Article : Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI

On site A captures packet on destination IP address and on site B with source IP address and please share the output. 

Thanks,

The issue solved

we created a static route on the SOPHOS of HEADQUARTER

Hi Sophos User825 

We glad that issue got resolved, please reach out to us for further assistance.