When my remote users connect to my AWS Sophos UTM, they are given a 10.242.0.0/16 IP address. When they connect to the servers on the inside of the Sophos, the Sophos will NAT them to an internal address.
How do I replace the NAT with routing? I'm assuming it is related to my Masquerading rule. My Masquerading rule shows Any -> Internal. This doesn't make sense. I would expect it to NAT my point-to-point VPN traffic too.
I have no NAT (Network Protection, NAT, NAT) rules.
Where should I look to change to routing?
This thread was automatically locked due to age.
