Traffic not passed through IPSEC S2S VPN

Hi Mayuresh,

Thank you for reaching out to Sophos Community.

For Traffic not passing through IPsec s2s VPN. You may refer to the following KB for troubleshooting.

Problem# 4 Traffic not passing through the IPsec VPN Tunnel

https://community.sophos.com/sophos-xg-firewall/f/recommended-reads/123740/sophos-firewall-troubleshooting-site-to-site-ipsec-vpn-issues#mcetoc_1elqugv8e6

You check the following youtube videos for configuring Sophos VPN IPsec to Fortigate www.youtube.com/watch

The article doesn't help considering some traffic passes through the tunnel not all applicable  traffic.

Hi Offline Mayuresh Bhagwat 

Please check and share traffic flow under MONITOR & ANALYZE || Diagnostics || Packet Capture and drop packet to investigate the issue. 

Enter BPF string as "host <destination IP>"

For troubleshooting keep VPN to LAN firewall rule on TOP.

Regards

I think everyone is missing one point here: The allowed remote network is 10.10.0.0/16 and the traffic for 10.10.10.x is passing through the tunnel however 10.10.90.x is not. This is routing issue wherein the traffic for 10.10.90.x is not being routed through the IPSEC tunnel.
The pcap clearly shows "incoming" traffic to the firewall but no corresponding "forwarded" entry. Also this is site to site IPSEC VPN.

Are these different sites for 10.10.10.x and 10.10.90.x ? What is their netmask?

Both belong to the same network of 10.10.0.0/16

I understand your netmask is covering both nets. :-)

But you did not answer my question.

Sorry I misunderstood the question. No these both IPs are at same site. 10.10.10.x is an application portal and one of the links points to 10.10.90.x which lies in the same network at the same site.

and all these have a /16 mask?

Yes they do

Yes they do

Can you show us a screenshot of the edit window of your IPsec tunnel definition?