Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 12 replies
  • Subscribers 27 subscribers
  • Views 1063 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

LAN not browsing, Remte Access VPN working

Gregory Ogola

Hello team,

I have configured Sophos XG. It came online and I configured Remote Access VPN which is working fine over the internet. However, the LAN cannot access internet completely. Any suggestions would be highly appreciated. Thanks.



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi Gregory, Thanks for reaching out to Sophos Community.

    Lan can't access properly? Did you mean the machines in your VPC can't access the internet or the remote access devices can't access internet after connecting to the Firewall via VPN? 

  • 0 in reply to FormerMember

     

    This is the topology, the FW sits behind a NAT device. So I have configured LAN 192.168.10.0/24 and WAN 192.168.5.0/24. The WAN Iface IP 192.168.5.1/24 is NATted at the VPC edge to a public IP.

  • FormerMember
    0 FormerMember in reply to Gregory Ogola

    Did you try to run a traceroute from the machine in the firewall's LAN and verified? 

    Also, you can ping 1.1.1.1 and take a GUI capture on the firewall to see how these packets are forwarded.

    Just ensure that the NAT Rule (if v18 or above) is added with MASQ in source NAT for the Outgoing traffic.

Reply
  • FormerMember
    0 FormerMember in reply to Gregory Ogola

    Did you try to run a traceroute from the machine in the firewall's LAN and verified? 

    Also, you can ping 1.1.1.1 and take a GUI capture on the firewall to see how these packets are forwarded.

    Just ensure that the NAT Rule (if v18 or above) is added with MASQ in source NAT for the Outgoing traffic.

Children