Welcome to ISAserver.org

Cannot ping remote net

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> Firewall Client >> Cannot ping remote net

Page: [1]

Message

<< Older Topic Newer Topic >>

Cannot ping remote net - 10.Mar.2008 12:06:30 PM

MarkScottSEA

Posts: 9
Joined: 7.Jan.2008
Status: offline

I am setting up a dual network testbed using ISA. I have set up the router rules to allow connections between the subnets.

I have installed the FW Client and also added DHCP 252 for WPAD and also removed the local gateway (as suggested to disable SecureNAT). Now I cannot seem to ping the remote subnet.

Am I being blonde here?

Post #: 1

Featured Links*

RE: Cannot ping remote net - 11.Mar.2008 2:04:06 PM

Kirill

Posts: 205
Joined: 26.Sep.2001
Status: offline

Only secureNAT clients can use ICMP (ping is an example).

_____________________________

Regards,
Kirill
Corporate SAP Basis Administrator/Chief IT Security Officer, MSc, MCSE.

(in reply to MarkScottSEA)

Post #: 2

RE: Cannot ping remote net - 13.Mar.2008 11:51:05 AM

MarkScottSEA

Posts: 9
Joined: 7.Jan.2008
Status: offline

Thanks for that.

I cannot see CIFS through the firewall either, I have set up a rule as follows:

array FW Policy:

Allow Infrastructure protocols from any to any all users
Allow CIFS / RPC / RDP from any to File Server for specified group
Deny Any Any

When I browse via UNC to the server it times out.

The firewall client username shows up as DOMAIN\MACHINENAME$ and I have checked for AD group membership, any ideas?

(in reply to MarkScottSEA)

Post #: 3

RE: Cannot ping remote net - 13.Mar.2008 3:05:32 PM

Kirill

Posts: 205
Joined: 26.Sep.2001
Status: offline

Hi MarkScottSEA,
Read the following Microsoft article, it explains why it doesn't work and what to do to rectify the situation: http://support.microsoft.com/kb/913782/en-us
In short, CIFS clients can't be authenticated.

_____________________________

Regards,
Kirill
Corporate SAP Basis Administrator/Chief IT Security Officer, MSc, MCSE.

(in reply to MarkScottSEA)

Post #: 4