LAN not browsing, Remte Access VPN working

The XG is setup in the cloud as a VM inside the VPC, therefore, the WAN IP is a private IP which is NATted to a public IP on the provider edge

Hi Gregory, Thanks for reaching out to Sophos Community.

Lan can't access properly? Did you mean the machines in your VPC can't access the internet or the remote access devices can't access internet after connecting to the Firewall via VPN? 

Hi Devesh, I meant the Servers in the VPC,when I make the FW their GW, they can't reach the internet. Rgds.

HI Devesh, any update? Servers in the VPC,are unable to reach the internet. The FW however can and is reachable from the internet.

This is the topology, the FW sits behind a NAT device. So I have configured LAN 192.168.10.0/24 and WAN 192.168.5.0/24. The WAN Iface IP 192.168.5.1/24 is NATted at the VPC edge to a public IP.

Did you try to run a traceroute from the machine in the firewall's LAN and verified? 

Also, you can ping 1.1.1.1 and take a GUI capture on the firewall to see how these packets are forwarded.

Just ensure that the NAT Rule (if v18 or above) is added with MASQ in source NAT for the Outgoing traffic.

ping test from Port1 - LAN

Ping from Port2 - WAN Port

Policy Test

Rules and NAT

Version

Gregory - Go ahead and delete that "Internet" Firewall Rule.  Once deleted, recreate it, but this time set the Source to "Any Host" instead of "local subnet" and do not create a linked NAT.  By default, the "DefaultSNAT IPv4" rule will be used.  You can verify by looking in your log viewer.

You can see it is being used by the traffic going through it on your pic above.

Done that, no linkedNAT, still not able to access net