VM in Azure - Sophos Site to Site with UTM

Idriel,

Did you create the proper firewall rule?

Pinging a device is it working?

Give us more information.

Thanks

Have only two rules,

One is LAN to WAN with MASQ.

Second one is LAN, VPN to LAN, VPN -> Any Service Allow, NO MASQ.

Ping from Azure XG to On-prem UTM LAN IP do not work.

Ping from On-prem UTM to Azure XG LAN NIC = Works?

Ping from On-prem UTM to Azure Server do not work (ping from XG to Azure servers work).  

On XG make sure to enable ping on vpn zone under Administration > device access.

What is the output of a traceroute?

Share the results

Thanks

VPN Ping already enabled.

No Traceroute in Azure, only * * * * *

traceroute to 192.168.1.1 (192.168.1.1), 30 hops max, 46 byte packets
 1  *  *  *
 2  *  *  *
 3  *  *  *
 4  *  *  *
 5  *  *  *
 6  *  *  *
 7  *  *  *
 8  *  *  *
 9  *  *  *
10  *  *  *
11  *  *  *
12  *  *  *
13  *  *  *
14  *  *  *
15  *  *  *
16  *  *  *
17  *  *  *
18  *  *  *
19  *  *  *
20  *  *  *
21  *  *  *
22  *  *  *
23  *  *  *
24  *  *  *
25  *  *  *
26  *  *  *
27  *  *  *
28  *  *  *
29  *  *  *
30  *  *  *

It seems something wrong with the tunnel.

Have a look at this kb:

Static routing is not needed but the vpn tunnel should update the routing table.

Well VPN's are ON and looks Ok but only ping from On-Prem UTM to internal XG works.

But between Azure XG and On-Prem UTM we have Azure that is doing something.

Azure effective routing that is added on VM

Here you see there is User defined, now I return it back to be as same value as defaut. So, I am interested if Azure read destination when packet left XG and send it into "well nothing".

Azure effective routing that is added on VM

Here you see there is User defined, now I return it back to be as same value as defaut. So, I am interested if Azure read destination when packet left XG and send it into "well nothing".

Idriel,

have a look at this KB:

https://community.sophos.com/kb/en-us/123334

I sent you a PM to help you.

Thanks

Thank you @lferrara verry much for TV session help and solving the issue.

I am experiencing the exact same issue.  Can you please elaborate on the solution?