LAN users cannot reach GP users

[MohamedSharief]

Hi All,

I've one inquiry where the client used to have an issue where the GP users can reach the LAN users but not vice versa.

Users in LAN and GP are on the same zone (Trust) but only GP can ping the LAN.

The tunnel of the GP doesn't have an IP address by default, I've tried to add an IP address for the tunnel but its still not working.

Nothing is denied in the traffic logs also and since they are on the same zone everything should be allowed.

The traffic logs showing the end reason as 'Aged-out'.

Anybody have an idea about this?

Regards,

Sharief

[TranceforLife]

Hi,

Ping always will show you "aged-out" as it doesn't use any port and it is not even TCP or UDP protocol. 

Can you make sure that the host you are trying to ping is simply responding for ping requests as well as try to initiate any other traffic from LAN > GP (web,  ssl etc). 

[MohamedSharief]

Hi @TranceforLife,

I tried the same setup in my lab with disabling the windows firewalls and everything was pingable.

It might be some kind of antivirus on the client machine that is blocking the ping request.

Thanks for your help.

Regards,

Sharief

[TranceforLife · Accepted solution]

Hence l did ask you to initiate any other traffic 😉