@solar_small you should run a Packet Monitor on the Firewall for IP, UDP, Port 67,68 and check if the DHCP Discover reaches the Firewall on the correct interface. If you can't see the Discover on the… (View Post)

@Paulw DPI-SSL/-SSH is included with your TZ 370 (and any other appliance). --Michael@BWC (View Post)

@Eddie I'am a bit confused, this looks like a standard scenario when LAN is behind a Core Switch etc., which is a router at the end of the day. You just need a Route for 192.168.0.0/24 pointing to Ga… (View Post)

@Rave_Romero12 if the ping only fails when the Tunnel is up, does the Tunnel Source/Destination Network include any of the involved Public IPs by any chance? --Michael@BWC (View Post)

Hi @Rave_Romero12 no, I meant in the VPN definition. Is any of the Public IPs defined either for Local or Remote Network? Did you fired up a Packet-Monitor to watch what happens to the packets? --Mic… (View Post)