VPN connects but does not seeing network thru Server 2019 NAT

[voltmaster]

I have Pulse Secure on my PC to connect to my work network. This problem started about a month ago. I had no problem for the last two years. When I'm on my home network, I can connect, but do not see my work network. The 'Pulse Secure' icon under 'Network connections' says 'Unidentified network'. Everthing works fine on a Comcast network and by using my cell phone. Now my home network goes though a server running Server 2019 using NAT. One network connection goes to my domain and one network connection to my DSL modem. If I connect to my DSL moden it works. I pretty sure the problem is in a blocked port in Server 2019. I looked though logs and even turned off all the firewalls. Nothing changes. I think this started on a update done last month but I will not let me remove all of them. Of coures my help desk is no help so I am here looking for answers. Thanks.

[[email protected]]

@voltmaster Thanks for the details. So if I picturize correctly, your server has two NICs.. one connects to internal network through a switch and other connects to DSL modem which is your internet uplink. Is that correct?

Now, when you said "If I connect to my DSL moden it works." does that mean you have connected your laptop/PC to the switch/VLAN that sits in-between MSFT server and DSL modem, so that your PC gets direct Internet access without going through MSFT Server?

The PC where you're seeing these issues, is it domain joined?

When the setup works, do you see the connection type as "Domain network + company's domain name on it" under network connections as opposed to "Unidentified network + public network"?

[voltmaster]

Yes. Server has two NICs.

If I connect to my DSL modem, I get acess. It is not a router built in. So only one connection.

Yes it is Domain Joined. I do see the proper domain name when it is working (Cell Phone).

Everything points to the Server as I see it. Just can't figure out what has changed and what is needs to do to work again.

[[email protected]]

@voltmaster Thanks for the details. Is it a full tunnel or split tunnel? If it's a split tunnel, are you able to access Internet resources and just the access to Intranet fails?

Since, you have mentioned that you are able to connect to INTERNET successfully through MSFT server, I suspect NO issues with Internet access, hence NAT part is working fine. Now, I'd like to know what access is failing through the VPN tunnel..so asked the above question.

What's the VPN tunnel IP address subnet?

      a) Is it the same as your local subnet (workstation <-> MSFT server) or different?

What's the first hop gets printed when you traceroute to any of the INTRANET traffic?

      a) Do you see the VPN tunnel (10.200.200.200) as first hop or your MSFT server IP (default gateway)?

      b) Please share the route table output (route print) after connecting to VPN through MSFT connection.