[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW-1] Weird issues with VPN / SecuRemote on NG FP1



All of a sudden, our FW1 box running on W2K has given us a bit of a
headache...

Citrix Metaframe access using SecuRemote no longer works when accessing it
from the Internet and/or ADSL type home offices, however it works fine from
our RAS segment. When connecting to the Citrix server, the initial
connection is successful, in that we get a black window. But the login
prompt does not appear, and after a while a timeout error occurs.

A second issue is that a VPN tunnel between two sites has stopped giving
access to Outlook WEB access. What's so strange about this is that one can
ping the OWA server, and one can retrieve simple web pages up to 1208 bytes.
Anything more than that fails. The OWA server works fine from another VPN
site. To another site where we run SAP GUI over VPN, the special SAP tool -
niping (tcp ping tool) can send packets of up to 1390 bytes with success,
1391 and above fails.

And to make the whole thing even more confusing: at the same site where
niping fails, I am able to use the OWA server.

I'm puzzled by this and can find no good reason for this to happen at all.
The only common thing here seems to be that on certain apps and on certain
VPN sites, packets over a certain size never gets to the receiver. Why??

Anyone seen this before or have any suggestions. Can someone explain why
this would happen at all?

Best Regards,
Thomas Nilsen
Kverneland IT
Tel: +47 51429463 <> Mob: +47 991 55 001

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================