Is WINS set up correctly on the SR box? Ensure that in the tcp/ip settings that here are some WINS settings. Also, watch for the IP rather than user name as you will get more data this way. We have this issue all the time and ensuring that WINS is correct and that DNS is correct usually fixes every issue with windows share names
Matt -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of David Strom Sent: Thursday, March 04, 2004 9:50 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Odd SecuRemote behavior by WinXP Pro Good ideas, thanks... the dns entries for these servers are public & working, and we tried using the IP address too. In the Tracker, I did see an attempt to reach the serveri via http request, but not the MS protocol which should have been used by the XP client. Yes, the user was able to ping the hostname, after the VPN connection was made. All of which, plus the fact that it was working when we tried it here, from a campus subnet outside the firewall, makes this phenomenon so frustrating and mysterious. -- David Strom YAVUZ TEMIZKAN wrote: > It sounds like the user can not reach the dns to resolve the server's > hostname. Check the user's dns server settings. > Can the user ping the file server by using the server's hostname? > And use \\(Ip_address) instead of just the hostname. > > > -----Original Message----- > From: David Strom [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 03, 2004 12:06 AM > To: [EMAIL PROTECTED] > Subject: [FW-1] Odd SecuRemote behavior by WinXP Pro > > This might be more an XP Pro phenomenon, but here goes -- I've got the > VPN working through our Solaris 8 VPN-1 (NG AI R54) gateway with VPN > accelerator card. Using IP Pools to provide an internal IP address for > SR uses. Seems to work just fine, I've used from home Win2K Pro, and > another IT guy used it OK at home with XP Pro. So what's the problem? > > I installed it on an WinXP Pro Dell laptop belonging to a user who was > heading to the London (UK) area. Tested it on a WLAN outside the > firewall, acted just fine, tried critical test- accessed MS file servers > from the Windows explorer with "\\server.ourdomain.edu" and a window > would appear prompting for username and password (not using SDL), so > gave it domainname\user and password and was able to access the server's > shares just fine. BUT, the user gets to the UK & can't access any > server, never gets the prompt for credentials. I can see the session in > Tracker, filtering for user name. Seems to be working fine, otherwise, > as the user can ping internal hosts (no ping allowed through firewall), > can send mail to external users (would have been rejected as a relay if > from an external IP address) so IP Pools config is working. > > In this users logs (all VPN traffic is logged, until I get all the kinks > worked out) I see an http service to the MS file server, but that's it. > If I filter for my test from home, there is no http traffic, just the > MS protocol, and it worked for me. I had the user explicitly try to > access with the command "explorer \\hostname.ourdomain.edu" from the > command line/start-->run to rule out wrong explorer (IE instead of Win) > and the \\s right (not //). > > Anyone have any ideas? Thanks in advance. > > -- > David Strom > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
