VPN IPSEC ping is working in one way direction

Question

Hello, 
 
 Please should be informed that we established a tunnel ipsec between two office A and B 
 
 ----Local subnet----A-----ipsec-----B----Local subnet 
 we can ping and RDP from local subnet of B to local subnet of A , but we are unable to ping or RDP from local subnet of A to local subnet of B 
 may you help us because this VPN is very important for us

Keyur · Accepted Answer

Hi Sophos User825

Please verify LAN to VPN and VPN to LAN firewall rule at Site B, please also tweak MASQ/NAT in VPN to LAN firewall rule to check, you may utilize the packet capture - https://community.sophos.com/kb/en-us/123189.

Please try to capture traffic on IP address of Site A at the packet capture of site B.

FormerMember · Answer

Hi Sophos User825 
 I would suggest you to take packet capture on both firewalls to track traffic from site A to B and find out where it is being dropped/blocked. 
 Please follow this KB Article : Sophos XG Firewall: How to monitor traffic using packet capture utility in the GUI 
 On site A captures packet on destination IP address and on site B with source IP address and please share the output. 
 Thanks,