SSL VPN Access IPSEC remote side

[RudiScott]

Hi all,

I have an IPSEC tunnel between 2 branches and that is functioning very well. I also have SSL VPN setup at my Head Office where users can access office resources remotely. 

The predicament I have found now is that I am unable to get the SSL users to access the remote office resources over the ipsec tunnel. 

I have added the SSL subnet to the IPSEC tunnel as well as the Firewall Policy but still not able to see or access the remote office. 

Any suggestions? 

Thanks 

[akristof]

Hello,

Make sure that you have these things configured correctly:

Add subnet of remote branch to SSLVPN - if using split-network

Phase2 - with correct source/destination subnets including your SSLVPN subnet

Valid firewall policies - on the HQ, from ssl.root (example for root vdom) to Ipsec

And double-check that remote-branch installed subnet of SSLVPN into routing-table so the traffic will not be dropped.

After this, try packet captures/debug flows on HQ and remote branch and see where traffic stops.