How SNAT through existing IPSec tunnel - routing problem

To be more specific I found already some information here. This fits exactly apart from the fact that my NAT address is from a public range:

https://community.sophos.com/products/unified-threat-management/f/network-protection-firewall-nat-qos-ips/41424/source-nat-on-utm-9

I did setup everything like this. The NAT address is configured as local network on the tunnel and source NAT is configured to NAT all requests from my local network to the remote network with this IP.

To be more specific I found already some information here. This fits exactly apart from the fact that my NAT address is from a public range:

https://community.sophos.com/products/unified-threat-management/f/network-protection-firewall-nat-qos-ips/41424/source-nat-on-utm-9

I did setup everything like this. The NAT address is configured as local network on the tunnel and source NAT is configured to NAT all requests from my local network to the remote network with this IP.

it is a really bad idea to use a public ip adress for that.

i think you need to change that first before you can go into troubleshooting.

Thanks for you reply but:

"... this is public IP address but it is not routed on Internet. All our VPN partners are provided NAT IP address in this range..."

So if this is a problem I assume it is not a general one but one with Sophos UTM.

then you have a routing / firewall rule  issue

check your mentioned kb article again.. it should also work with public adress if you configure it proper on both sides.

i use snat for some ipsec tunnels also (cause customer uses same lan adress) so i cant think its a utm problem

if you want more specific help we need more specific details form your config.. screenshots form ipsec-tunnel config / nat-config / firewall-rules will help us..