This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Remote SSL-VPN users cannot communicate with network connected via IPSec VPN

Network A - 192.168.1.0/24
XG A - 192.168.1.10
Network B - 192.168.2.0/24
XG B - 192.168.2.10

IPSEC VPN between the two XG is working fine, all hosts are accessible from branch office to head office and vice versa.

The problem is that the remote SSL-VPN users connected to XG in Network A cannot connect to hosts in Network B. They can only connect to Network A users.

What are the steps that needs to be done in order to make the SSL-VPN users from network A to communicate with network B?

Thank you.

This thread was automatically locked due to age.

Top Replies

emmosophos over 4 years ago +2 verified

Hello John, Thank you for contacting the Sophos Community! Please take a look at this KB , this explains the steps to achieve this. But basically, you want to add in the SSL VPN allowed networks…

0 roland diener over 4 years ago

Hello

Add the VPN-Zone and the SSL-VPN-Network to your ipsec-firewall-rule. Then it works.

Regards

Roland
Cancel
Vote Up 0 Vote Down

Cancel
0 John Orland Pinauin over 4 years ago in reply to roland diener

You mean in the IPSec VPN configuration? I'll try that. Thank you
Cancel
Vote Up 0 Vote Down

Cancel
0 roland diener over 4 years ago in reply to John Orland Pinauin

Yes and if you have a very restricted firewall-rule then also edit the rule in the "rules and policies"
Cancel
Vote Up 0 Vote Down

Cancel
0 John Orland Pinauin over 4 years ago in reply to roland diener

The firewall rule isn't restricted as the IPSec firewall rule is set to VPN,any to LAN,any and LAN,any to VPN,any as inbound and outbound policies for the IPSec VPN. So is it okay to just make the adjustment on the IPSec VPN configuration?
Cancel
Vote Up 0 Vote Down

Cancel
+1 emmosophos over 4 years ago

Hello John,

Thank you for contacting the Sophos Community!

Please take a look at this KB, this explains the steps to achieve this.

But basically, you want to add in the SSL VPN allowed networks the subnet of the Network B Firewall.

Then in the IPsec tunnel, you want to add the SSL VPN pool of Network A in both XG firewalls, (make sure to change the SSL VPN pool on the Network B to not overlap the one from the Network A Firewall)

Regards,
Cancel
Vote Up +2 Vote Down

Cancel
0 John Orland Pinauin over 4 years ago in reply to emmosophos

Thank you so much for this
Cancel
Vote Up 0 Vote Down

Cancel