site to site ssl

Khaled,

can you share some screenshot of your config?

Thanks.

Hi,

i've nearly same Problem. I connected two Sophos XG with SSL VPN Site to Site. 

Both are green but i can't ping Sites. 

Site A:

Site B:

cheers,

Olli

Oil,

create a LAN to VPN and VPN to LAN policy. Also check that Ping is allowed inside Administration > Device Access.

Thanks

This way?

Site A:

Site B:

Oil, does it work?

If not send me a PM and I will have a look at it.

Regards,

We tried already several things. 

New VPN S2S Connections, Firwalls rules and so on...

Users have no Internet Access if they are connected via VPN Roadwarrior.

I changed the Firewall rule to 

Source VPN - Destination LAN / WAN and it seems to work. 

cheers,

Olli

HI Olli, 

If you need to access each site you would need to create Rule LAN and VPN in both Source and Destination at each site , But if you would need to access internet then you would need to add the same with NAT MASQ  on the site you wish to access internet from .

Okay Internet works partially. Sometimes on SITE B DNS or something else stop working. After Reboot of XG everything works fine again.

Back to Topic

SITE B is connected to Site A via SSL VPN. 

It is not possible to ping or DNS request from B to A

Routing is setup 

other SITE A 

Ping timeout from SITE B but Gateway 192.168.198.1 is reachable and can be pinged.

any suggestions for that?

cheers,

Olli

Hello Khaled,

I used the following video and I followed the way he create the policy at the end of this video and it was working properly for me:

https://www.youtube.com/watch?v=U1nhQN8lUYg