Branch Office Access

Question

I use TMG as our companies Proxy as well as default gateway. I have recently installed 2 sonicwall tz105 devices, one located at our branch office and one located in our main office where the TMG server is located. The branch office uses this device for
internet access and a vpn tunnel to our main office. (At one time I had a ISA server at the branch location and it was the vpn tunnel to our main but this is a small 2 man office and keeping the isa server up to date was becoming a pain.) The branch office
has no problems accessing the main office. My problem is getting the main office to access the branch office. Right now if a client computer on the main network wants to access a server on the branch office the only way to accomplish this is to change the
client computers gateway from the tmg server ip to the sonicwall ip. This was not a problem in the past when I had 2 isa or tmg servers at both locations because the rules would pass the traffic to the branch office. I have tried putting rules in the TMG server
for traffic bound to the branch office network but nothing seems to work.
Should I be using tmg rules to accomplish this or do I need to go a different route such as dns or routing.
Thanks,

Answer 1

HI Gray,
Belwo are my suggestations.
Ensure all the client Default gateway is pointing to TMG, If you have any L3 Switch Devices before TMG Internal Interface then on L3 point Default gateway to TMG Internal Interface and on all client make Gateway as L3 Switch.
Create a network Subnet Set of Branch Office in TMG
In TMG Networking, You need to have a route relationship
Go to Networking, Create a new network Rule, From Branch Office Subnet to Internal as Route ( Not NAT). As route is bidirectional it will automatically route Internal to Branch Office
On Access Rule, Create Two Rules, Internal to Office Subnet and Office to Internal and allow all outbound Ports
Ensure, Your SonicWALL is Routing Traffic to Internal network to TMG External interface.