IPsec to IPsec communications

Hello Lyubomir,

Thank you for contacting the Sophos Community.

Based on what I have been reading on the post, you need to add the IPsec Range in to the permitted network resources for Sophos Connect Client 

You can add each IP or just add the IP range of IPs you are providing to the Sophos Connect Client users.

Regards,

Hello emmosophos,

I already did this as I mentioned in my first post. I tried to add it as a Network, as only IP's like the screenshot you posted. None of that changed anything.

Hello emmosophos,

I already did this as I mentioned in my first post. I tried to add it as a Network, as only IP's like the screenshot you posted. None of that changed anything.

Hello there,

What is the range of your SSL VPN?

Regards,

Hi Lyubomir Todorov , 

Hope you are doing good.

VPN-VPN firewall rule requires if your have Head office and Branch Office connected with IPSec VPN and your remote user is connected to HO and wants to access resource of BO.

If you are not getting traffic flow on Firewall as per the drop packet capture or tcpdump , means no issue with firewall but to make sure the resource we want to access from outside are accessible on LAN, if they work on LAN it will work from outside.

If you have shared some more information as per the first post please share the logs for below command it would be helpful 

Please check traffic flow with tcpdump and drop packet capture 

console>tcpdump 'host <destination IP> and proto ICMP

console>drop-packet-capture 'host <destination IP> and proto ICMP

And as per your post it seems your both employees are now working from home and same software used from communications is not working as they are not in LAN ? May I know the error or error message you are getting while communicating ?

it would be great if you share how both the employees are they able to reach over ping connectivity test ?

Please share ipconfig /all for both the users if they have windows and ifconfig in case user have linux 

Thanks and Regards