[FW-1] Strange problem with Web access to an Access Point defined in a DMZ lan

[admin@FW1-NOSPAMIAA.GOV.IL]

Title: Strange problem with Web access to an Access Point defined in a DMZ lan

Afternoon all,

I have a very odd situation here that I am unable to work out.

I have a setup as follows :

Internal Network

|

|

FW ---- Secured VLAN

|

|

Internet

On the secured VLAN I have a Lan dedicated only to Access Points.

I have a rule allowing specific users to access the AP's from the Internal Network using HTTP and Telnet.

The users can Telnet to the AP's fine.

The users attempt to access the AP's via HTTP. I see the sessions established in the log' and in the browser I get :

"FW-1 at fw: Failed to connect to the WWW server".

This again, despite the fact that I see the session established in the logs, and Telnet (standard) works fine.

Anyone have any idea what could be causing this ?

Thanks,

Mike Glassman

System & Security Admin

Computer & Information Systems

Israeli Airports Authority

Ben-Gurion Airport

http://www.ben-gurion-airport.co.il

Tel : 972-3-9710785

Fax : 972-3-9710939

Email : admin@iaa.gov.il

Usage of this email address or any email address at iaa.gov.il for the purpose of sales pitches, SPAM or any other such unwanted garbage, is illegal, and any person, whether corporate or alone doing so, will be prosecuted to the fullest possible extent.