This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SOPHOS XG v18MR5. SophosConnect - Problem with SNAT Rule

I setup a IPSec VPN using SophosConnect client and it is working fine with SNAT rule as "MASQ" and all allowed lan networks are accessible from VPN.

The problem I am having when I change SNAT rule from "MASQ" to "Original" to access my database server with VPN virtual IP address. I can't access my lan network with SNAT rule "Original".

Does anybody have any idea how that would work?

Sajjad Ali

This thread was automatically locked due to age.

Parents

0 emmosophos over 4 years ago

Hello Saj,

Thank you for contacting the Sophos Community.

Are you seeing the traffic arriving to your database when you change the NAT to be the Original?

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 sajjadali750 over 4 years ago in reply to emmosophos

Hi Sir,

No i didn't check with db admin as i am unable to ping any of gateway of my lan network.
Cancel
Vote Up 0 Vote Down

Cancel
0 emmosophos over 4 years ago in reply to sajjadali750

Hello,

So you would need to do a tcpdump on the XG to see how the traffic is flowing.

Packet Capture

Regards,
Cancel
Vote Up 0 Vote Down

Cancel
0 sajjadali750 over 4 years ago in reply to emmosophos

Hello,

Packet Capture results using NAT as "MASQ" and "Original" are in screenshots attached, please advise accordingly.

NAT=MASQ

NAT=Original
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 sajjadali750 over 4 years ago in reply to emmosophos

Hello,

Packet Capture results using NAT as "MASQ" and "Original" are in screenshots attached, please advise accordingly.

NAT=MASQ

NAT=Original
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data