Hello, world.
I have an environment similar to this:
LAN -> SWCORE -> Firewall CP -> INTERNET
We currently have an IPsec VPN set up against a FG.
For the moment everything is working "fine" (Except for the observation that the blessed FG, its VPN stops going down every so often, but for the CP, everything is fine).
When the VPN is up and running, we have the problem that the IP of the SRV on our side, which is going to pass through the VPN, generates traffic to the destination behind the FG, but the CP "does not see anything coming".
I have run commands like "tcpdump" "FW monitor", "fw ctl zdebug drop", and the CP does not see "nothing" of the traffic generated by the VRS (at least it should see that it reaches the Firewall, but we do not see anything).
This could be a routing problem????
It is worth mentioning that from the same GW(Checkpoint), I do a simple PING test to the SRV on our side, and it does work.
Well, I am already confused, "why" the connection to the SRV works from my side, but why I don't "see" traffic coming to my GW, when the test is launched from the same server. 😞
The IP of my SRV is 10.7.12.64
![SRV.png SRV.png](https://community.checkpoint.com/t5/image/serverpage/image-id/21543i77CA0B3ED09D2428/image-size/large?v=v2&px=999)
I would appreciate, if you can support me with any opinion that can clarify my doubt.
The IP of the SRV is inside the VPN DOMAIN on my side, and the security rule is well constructed.
Cheers. 🙂