Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 11 replies
  • Subscribers 28 subscribers
  • Views 978 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Traffic not passed through IPSEC S2S VPN

Mayuresh Bhagwat

I am working with a customer where we have IPSEC VPN created between Sophos and Fortinet. The network allowed from the Fortinet side and configured as "Remote Subnet" in the IPSEC VPN is 10.10.0.0/16. We also have some URL's configured and the DNS Host entries for them configured.

The DNS entries work fine, however, one of the link points to an IP of 10.10.90.111 and that doesn't open. On capturing packets I see that the Sophos Firewall shows the traffic hitting the LAN port but the same is not Forwarded over to the ipsec tunnel. Any idea why would this happen and the fix for the same?



This thread was automatically locked due to age.
Parents Reply
  • 0 in reply to Bharat J

    I think everyone is missing one point here: The allowed remote network is 10.10.0.0/16 and the traffic for 10.10.10.x is passing through the tunnel however 10.10.90.x is not. This is routing issue wherein the traffic for 10.10.90.x is not being routed through the IPSEC tunnel.
    The pcap clearly shows "incoming" traffic to the firewall but no corresponding "forwarded" entry. Also this is site to site IPSEC VPN.

Children
Unfiltered HTML