This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SD-WAN policy does not work as expected

I have two links in the company and I'm trying to set up an SD-WAN policy for a given network to exit through one of these LINKS, but some sites only show TIMED_OUT, it's as if the connection started but couldn't finish. I have already confirmed the settings according to the Sophos own manual and apparently it is OK. I opened a support ticket, but they cannot solve my problem.

This thread was automatically locked due to age.

Top Replies

LuCar Toni over 4 years ago +1

Is the SNAT Rule correct?

Parents

0 @wajdiaa over 4 years ago

Check routing precedence with show and then set: console> system route_precedence set static sdwan_policyroute vpn or sdwan_policyroute first.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vict0r- over 4 years ago in reply to @wajdiaa

I did a test by placing sdwan_policyroute as a primary, but to no avail.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Vict0r-

You should perform a tcpdump on the appliance and check this connection. I assume it is not a issue of the XG.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vict0r- over 4 years ago in reply to LuCar Toni

If it is not an XG problem why do I have the same behavior in both environments? Production and laboratory? If it were something from my production environment, it wouldn't happen in the laboratory.
Cancel
Vote Up 0 Vote Down

Cancel
0 LuCar Toni over 4 years ago in reply to Vict0r-

Maybe related to your WAN IP? Check the tcpdump and see, if the server replays at all.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vict0r- over 4 years ago in reply to LuCar Toni

My laboratory environment is virtualized, using EVE-NG, where everything goes through one LINK, but I simulate two LINKS, I have the same problem in my production environment, where I have two different isp links.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vict0r- over 4 years ago in reply to LuCar Toni

I invite you to make a laboratory and post the result here
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vict0r- over 4 years ago in reply to LuCar Toni

I invite you to make a laboratory and post the result here
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data