RE: [FW1] Secure Remote and browsing the Local LAN

[Lynn Maust <lynn.maust@FW1-NOSPAMansys.com>]

Call your ISP's Tech Support and verify that they aren't blocking any or all
of the ports 135-139.  I have run into several (Bell Atlantic/Verizon - PA &
Charter Communications are two) that are blocking these ports which prevents
WINS from browsing your network.  ISP's that don't block anything work fine.
AOL and CompuServ also state they block network connections.  

I'm using SecuRemote (W98, ME, W2K, NT), IKE, Entrust PKI certificates and
PeerLogic LDAP for encryption, authorization and authentication.  The
connections come in as SSL when they block the ports vs. IKE.  When testing
Bell Atlantic, Charter Comm, AOL and CompuServ are all coming in as SSL -
ISP's that don't block the connection comes in as IKE.

Has anyone else run into this and is there a work around?

Lynn

-----Original Message-----
From: Juan Concepcion [mailto:juanconcepcion@earthlink.net]
Sent: Friday, April 06, 2001 8:21 PM
To: razor NT; fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: Re: [FW1] Secure Remote and browsing the Local LAN



You have to set "Client for Micrsoft Networks" in the network settings to
automatically log into your domain (map shares if necessary).  You then have
to
populate your lmhost file with entries for your internal resources.  When
you
initially log into the WINNT machine you will get a "no domain controller
found" error which is normal.  After you've authenticated then you will want
to
try accessing your internal resources.  If you go to support.checkpoint.com
and
look into the public configuration docs there is a slew of information on
how
to set this up.  Essentially the doc there is for WIN98 but it also ports
over
for WINNT clients.  Good Luck!!

Juan Concepcion
CCSA/CCSE

On Thu, 05 Apr 2001, razor NT wrote:
> I am using WIN NT 4.0 workstation SP. 6a. I can authenticate to the FW,
but 
> I am unable to browse the local LAN. I have added the WINS address to the 
> TCP/IP properities for both the NIC and the ISP DUN icon. The NIC is 
> disabled also.
> 
> When I dial-up to the ISP I get prompted for the FW username and password,

> but it does not seem to authenicate to the NT domain.  Also I am using the

> same username and password for the FW and domain.
> 
> Thanks in advance for your ideas and solutions.
> _________________________________________________________________
> Get your FREE download of MSN Explorer at http://explorer.msn.com
> 
> 
> 
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================