IPsec Remote access client can't reach other IPsec clients/SSL VPN clients

Question

Hi all, 
 I've setup an IPsec Client Connect client as I'm migrating our users from the SSL VPN client we've used previously. Everything is working fine with regard to reaching the clients from our LANs and the reverse however I can't reach the SSL VPN clients or other IPsec clients from an IPsec client and the same applies from an existing SSL client. 
 I've configured the network access the same as I did for our LANs under the IPsec settings and applied the same logic to the firewall rules however I just can't get any traffic flowing. 
 Could anyone advise?

Vishal_R · Answer

Hi Tungmeister : I have also checked or tested previously such requirements with SSL VPN only, For IPSec remote access not tested or checked -so not sure. However when you are checking the IPSec remote access client connection from another client, what is the observation of TCPDUMP and Drop packet on XG for source and destination IP? Also, any luck for testing if you change tunnel mode from split to full or vice versa to see how it goes?

emmosophos · Answer

Hello Tung, 
 Thank you for contacting the Sophos Community. 
 For the Sophos Connect Client, to communicate with each other, you would need to add under the Sophos Connect Allowed network the range for the Sophos Connect Client, and create a VPN to VPN rule. 
 Regards,

IPsec Remote access client can't reach other IPsec clients/SSL VPN clients

Top Replies

Submitted a Tech Support Case lately from the Support Portal?