Sophos Conncet / SSL-VPN IPSec Tunnel zu Branch-Office no access - other Subnet

Question

Hello everyone,

I have a problem with VPN access to the Branch-office. We have several IPSec tunnels to our Branch-office. These work well. However, if a VPN user connects via the Sophos Connect client or the SSL VPN client, he has no access to the Branch-office. The network behind the XG is easily accessible.
 Configuration:
Head office: 192.168.130.0/24 - XG 210
Branch Office A: 192.168.131.0/24 - Vigor Router 2860
VPN user: 10.168.130.0/24

The configuration of the VPN-S2S tunnel includes both subnets (192.168.130.0 and 10.168.130.0). The tunnel is also displayed "green" for both subnets.
The other subnet (10.168.130.0/24) was also added on the Branch Office. Otherwise the tunnel would not point to "green".

Is it necessary to add a static route or must a NAT rule be created? How?
I've already got two different tickets through Sophos support - but so far without success - bad feedback. Can someone from the community help me? I've already tried a number of instructions. Actually, the following fits good: https://sophos.com/kb/127761 , but unfortunately does not work.

many Greetings
Martin

FormerMember · Accepted Answer

Hi TSKSN 
 Source network should be your SSL Remote Network, and destination should be peer firewalls local network. 
 Thanks,

FormerMember · Answer

Hi TSKSN 
 Apologies for the inconvenience caused. 
 I would advise you to follow this KBA for more info: Sophos XG Firewall: How to configure access for SSL VPN remote users over an IPsec VPN . 
 You are probably missing VPN to VPN rule or peer firewalls local subnet is missing under permitted networks in the SSL VPN profile. 
 Thanks,