Sophos XG in Azure IPSEC S2S Ping just one way (NAT problem?)

Question

Hi folks, 
 I've a Sophos FW set up in azure with VPN S2S IPSEC to a on prem Sophos FW and ping is only working from on prem to Azure XG but not the other way around. I can see packets incoming from the client (172.25.2.6) and then the XG in Azure is nating and rewrites the client address to the WAN interface IP (10.25.1.4) and the XG is forwarding the packets through the tunnel. Why's that? 
 Thanks in advance! 
 
 Best regards!

LuCar Toni · Answer

Would recommend Route based VPN instead of Policy based. Then use a route. docs.sophos.com/.../

HardikR · Answer

Hi, 
 Is base firewall license showing as subscribed within XG in Azure? its possible that traffic will get NATed with outgoing interface IP when base firewall license is not there.

Sophos XG in Azure IPSEC S2S Ping just one way (NAT problem?)

Top Replies

Submitted a Tech Support Case lately from the Support Portal?