topic Re: Remote access users cannot acces local network in SASE and Remote Access

Remote access users cannot acces local network

Webnoob — Mon, 23 Jun 2025 09:24:57 GMT

When remote access users try to RDP til at local server there are no responds from the RDP client.
Remote access users try to acces server with ip 192.168.2.91

In wireshark I have an incomplete conversation.
..0. .... = RST: Absent
...0 .... = FIN: Absent
.... 1... = Data: Present
.... .1.. = ACK: Present
.... ..0. = SYN-ACK: Absent
.... ...0 = SYN: Absent

but server with 192.168.2.44 is responding.

I can only see in the log 'Decrypted in community RemoteAccess' for my source RemoteAccess ip address.

Any clues?

Re: Remote access users cannot acces local network

PhoneBoy — Wed, 25 Jun 2025 21:02:14 GMT

Are these hosts on the same network as the gateway or somewhere else?
How are you determining which TCP states are seen?
Have you confirmed connectivity from the gateway to 192.168.2.91? If so, how?

Re: Remote access users cannot acces local network

the_rock — Thu, 26 Jun 2025 00:56:39 GMT

Sounds like that particular server issue, considering another IP in the same subnet works fine.

Andy

Re: Remote access users cannot acces local network

_Val_ — Fri, 27 Jun 2025 08:27:38 GMT

Routing issues? You need to ensure that the return packets are being sent to your VPN gateway and not elsewhere. You might need an Office Mode IP Pool to achieve that.

Re: Remote access users cannot acces local network

Webnoob — Fri, 27 Jun 2025 14:20:03 GMT

Hi all

Thanks for your replies.
Since nothing have changed on the firewall and it is only new servers I have sent the issue to the server managers.

Re: Remote access users cannot acces local network

JozkoMrkvicka — Sat, 28 Jun 2025 05:56:04 GMT

Should be easy task for server team - compare routing and settings between working host 192.168.2.44 and not working host 192.168.2.91.

Re: Remote access users cannot acces local network

the_rock — Sat, 28 Jun 2025 18:38:14 GMT

Agree with that.