Guest User!

You are not Sophos Staff.

This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Remote VPN users work with the site-to-site VPN

We just replaced a SonicWall dual brach office infrastructure with two SOPHOS XG firewalls, and there have been some problems getting some network connections functioning properly. 

The iPSec site-to-site VPN between the two XGs is working fine, but we had issues with a secondary LAN port & subnet at Site2. Support indicated the fix was to create a LAN / Any to LAN / ANY firewall rule on the Site2 XG. This did the trick, but I am still wondering about creating such a rule in the same zone. 

Regardless, we have to issues remaining:

While the LAN two subnets can now communicate with each other, the second LAN subnet at Site2 cannot see internal network resources on at Site1 over the existing site-to-site ipsec tunnel.

Also, the remote Ipec VPN users that connect to Site1 were previously to successfully access internal network resources at Site2 with the SonicWalls.  While thy can see all the Site1 resources when remotely connected, they are not able to access anything on Site2.

The engineer today suggested this KB - https://support.sophos.com/support/s/article/KB-000037043 for the latter remote VPN user issue, but we are not using the Remote SSL VPN (rather the Remote IPsec VPN). So the instructions in the KB  don't really match up. We tried to use the SSL VPN, but there were problems downloading that client via the User Portal of the XG. The links did not seem to work. 

The method of remote connections is not that important as long as we can get everything work as before. 

Would greatly appreciate any suggestions / recommendations. 

Thanks much!

 

Please advise on how we can move forward ASAP on both remaning issues.

 

Reply to this email or give me call back at your earliest convenience. If you miss me at the office, feel free to try my mobile: 913.558.3994.2

 

Thanks and regards,



This thread was automatically locked due to age.
Parents Reply Children
No Data