Login by remote-VPN , Route to second network

Question

I have 2 XGS "A" and XGS "B", connected by a Site to Site IPSEC tunnel. 
 Connections work fine. 
 
 Now i have to have access to a network at "B" by a Remote-VPN connection at "A" 
 
 Remote-VPN => "A" <=> "B" 
 
 The vurtuell network of the Remote -VPN is added to the tunnel at both sides, all lights are green 
 Network at "B" is added to the remote-vpn as valid networkresource 
 
 But it does no ping or anything else. Does'nt even show the attemp in the log to reach "B" 
 Do i have to add a route?

Vivek Jagad · Answer

Hello MGM1 , Thank you for reaching out to the community, have you created a FW rules on both the sites A & B: LAN TO VPN && VPN TO LAN ? You can also refer the Best practice for site-to-site policy-based IPsec VPN - https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/122440/best-practice-for-site-to-site-policy-based-ipsec-vpn A nd for the remote network - Allow Remote Access SSL VPN traffic over an existing IPsec tunnel - https://support.sophos.com/support/s/article/KB-000037043?language=en_US