Ray Pesek, CISSP
From: David Strom <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [FW-1] Odd SecuRemote behavior by WinXP Pro Date: Thu, 4 Mar 2004 11:50:10 -0500
Good ideas, thanks... the dns entries for these servers are public & working, and we tried using the IP address too. In the Tracker, I did see an attempt to reach the serveri via http request, but not the MS protocol which should have been used by the XP client. Yes, the user was able to ping the hostname, after the VPN connection was made. All of which, plus the fact that it was working when we tried it here, from a campus subnet outside the firewall, makes this phenomenon so frustrating and mysterious. -- David Strom
YAVUZ TEMIZKAN wrote:
It sounds like the user can not reach the dns to resolve the server's hostname. Check the user's dns server settings. Can the user ping the file server by using the server's hostname? And use \\(Ip_address) instead of just the hostname.
-----Original Message----- From: David Strom [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 03, 2004 12:06 AM To: [EMAIL PROTECTED] Subject: [FW-1] Odd SecuRemote behavior by WinXP Pro
This might be more an XP Pro phenomenon, but here goes -- I've got the VPN working through our Solaris 8 VPN-1 (NG AI R54) gateway with VPN accelerator card. Using IP Pools to provide an internal IP address for SR uses. Seems to work just fine, I've used from home Win2K Pro, and another IT guy used it OK at home with XP Pro. So what's the problem?
I installed it on an WinXP Pro Dell laptop belonging to a user who was heading to the London (UK) area. Tested it on a WLAN outside the firewall, acted just fine, tried critical test- accessed MS file servers from the Windows explorer with "\\server.ourdomain.edu" and a window would appear prompting for username and password (not using SDL), so gave it domainname\user and password and was able to access the server's shares just fine. BUT, the user gets to the UK & can't access any server, never gets the prompt for credentials. I can see the session in Tracker, filtering for user name. Seems to be working fine, otherwise, as the user can ping internal hosts (no ping allowed through firewall), can send mail to external users (would have been rejected as a relay if from an external IP address) so IP Pools config is working.
In this users logs (all VPN traffic is logged, until I get all the kinks worked out) I see an http service to the MS file server, but that's it. If I filter for my test from home, there is no http traffic, just the MS protocol, and it worked for me. I had the user explicitly try to access with the command "explorer \\hostname.ourdomain.edu" from the command line/start-->run to rule out wrong explorer (IE instead of Win) and the \\s right (not //).
Anyone have any ideas? Thanks in advance.
-- David Strom
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
_________________________________________________________________ Get a FREE online computer virus scan from McAfee when you click here. http://clinic.mcafee.com/clinic/ibuy/campaign.asp?cid=3963
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
