Communication between branches

Hello Anesu,

Thank you for contacting the Sophos Community.

This sounds like a Hub and Spoke deployment; take a look at the following KB.

If the issue persist, you would need to confirm first if computers in let's say Branch A can reach out to Branch B. 

Also if this is not a Hub and Spoke Deployment, provide a simple diagram of your network.

Do the branch also use Sophos Firewall devices?

Regards,

Hello Anesu,

Thank you for contacting the Sophos Community.

This sounds like a Hub and Spoke deployment; take a look at the following KB.

If the issue persist, you would need to confirm first if computers in let's say Branch A can reach out to Branch B. 

Also if this is not a Hub and Spoke Deployment, provide a simple diagram of your network.

Do the branch also use Sophos Firewall devices?

Regards,

Good day 

Its not a Hub and Spoke 

In the communication from HQ to branch office there are GRE tunnels, but the communication let's say branch A  and Branch B, are not communicating.   Please find an attached diagram

Natpharm diagram.pdf

At branch offices there are routers, we don't have sophos firewalls

Anesu Dangarembwa said:

Its not a Hub and Spoke

not sure on the Hub and Spoke 

Hello Anesu,

Thank you for the follow-up.

If for Site A to get to Site B, the traffic needs to pass through the HQ; then you would have a Hub and Spoke environment.

If Site A and Site B don’t go through the HQ to get to each other, then I am unsure how the Sophos Firewall plays a role here.

In any case, you can confirm if the Sophos Firewall is seeing traffic by doing a GUI PAcket Capture or TCPdump by filtering for a computer IP on Site A and one on Site B 

E.g

tcpdump -eni any host 192.168.20.100 and host 192.168.30.100 and ICMP

If you see ICMP traffic, then filter for some VoIP ports, such as 5060, this will help you see where you need to start looking to troubleshoot and if the Firewall is dropping/blocking the traffic, or  some routing issue in your branches.

Regards,

Thank you