OpenVPN connecting but can't access to my local devices / shared folder

[joedoe]

Hello everyone,

2 days ago i created an access to my local network througth openvpn.
I just created a simple user (SSL TLS + User auth.) and correctly connect to my network and i was able to access to my share folder.

But yestuday i tried to connect to my vpn thank to my ad account.
Now i can connect to my network thank to my ad account and local pfsense user but i don't know why i can't access to my shared folder / network devices anymore. Could you help me please, it's pretty strange because i"m correctly connect to my vpn but can't access to my network ressources.

More information :
My pfsense version : 2.4.3

My network configuration :

here my client configuration

dev tun
persist-tun
persist-key
cipher AES-256-CBC
ncp-ciphers AES-256-GCM:AES-128-GCM
auth SHA1
tls-client
client
resolv-retry infinite
remote XXXXXXXXX 1194 udp
verify-x509-name "Certificat Serveur Partage VPN" name
auth-user-pass
pkcs12 pfSense-UDP4-1194-XXXXX.p12
tls-auth pfSense-UDP4-1194-XXXXX-tls.key 1
remote-cert-tls server

Et voici ci dessous la configuration du serveur openvpn :

my client logs

Wed Jul 11 10:17:14 2018 OpenVPN 2.4.4 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Sep 26 2017
Wed Jul 11 10:17:14 2018 Windows version 6.2 (Windows 8 or greater) 64bit
Wed Jul 11 10:17:14 2018 library versions: OpenSSL 1.0.2l  25 May 2017, LZO 2.10
Enter Management Password:
Wed Jul 11 10:17:21 2018 TCP/UDP: Preserving recently used remote address: [AF_INET]XXXXXXXXX:1194
Wed Jul 11 10:17:21 2018 UDP link local (bound): [AF_INET][undef]:1194
Wed Jul 11 10:17:21 2018 UDP link remote: [AF_INET]XXXXXXXXX:1194
Wed Jul 11 10:17:21 2018 WARNING: this configuration may cache passwords in memory -- use the auth-nocache option to prevent this
Wed Jul 11 10:17:22 2018 [Certificat Serveur Partage VPN] Peer Connection Initiated with [AF_INET]XXXXXXXXX:1194
Wed Jul 11 10:17:23 2018 open_tun
Wed Jul 11 10:17:23 2018 TAP-WIN32 device [Ethernet 4] opened: \\.\Global\{57DA1C56-202B-471C-802F-DD2BEFDFBA1D}.tap
Wed Jul 11 10:17:23 2018 Set TAP-Windows TUN subnet mode network/local/netmask = 10.0.8.0/10.0.8.2/255.255.255.0 [SUCCEEDED]
Wed Jul 11 10:17:23 2018 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.0.8.2/255.255.255.0 on interface {57DA1C56-202B-471C-802F-DD2BEFDFBA1D} [DHCP-serv: 10.0.8.254, lease-time: 31536000]
Wed Jul 11 10:17:23 2018 Successful ARP Flush on interface [9] {57DA1C56-202B-471C-802F-DD2BEFDFBA1D}
Wed Jul 11 10:17:23 2018 do_ifconfig, tt->did_ifconfig_ipv6_setup=0
Wed Jul 11 10:17:28 2018 Initialization Sequence Completed

and my server logs :

Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_VER=2.4.4
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_PLAT=win
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_PROTO=2
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_NCP=2
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_LZ4=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_LZ4v2=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_LZO=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_COMP_STUB=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_COMP_STUBv2=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_TCPNL=1
Jul 11 10:17:22 pfSense openvpn[268]: XXXXX/77.136.204.222:1194 peer info: IV_GUI_VER=OpenVPN_GUI_11
Jul 11 08:17:22 pfSense openvpn: user 'XXXXX' authenticated

I don't know if the problem come from ip overslaping or an other problem.

Thank a lot for your help.

[joedoe]

Après quelques recherches il s'avère que c'est me pare feu de mon antivirus qui me bloque.

[bepo]

Hello,

is everything working now?
Did you created firewall rules for incoming traffic?

Kind regards

[joedoe]

Hello Yes all is working, after some rechearch i found something concerning virus protection.
But now my problem is : i have to disable my bitdefender firewall to access to my network. Someone know how to enable the btdefender firewall and add an exception ?

Thank a lot