Make sure your firewall permits bi-directional ICMP (ping/tracert) traffic. Just because routing works one way, does not always mean that it will work the other way. Check the routing tables at both ends. What is the default gateway on the clients at the main office? Is there a routing path defined from those clients to the Sonicwall and then to the remote office?