Welcome to ISAserver.org

Site to site VPN Kerberos-Sec (TCP) Denied Connection

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Site to site VPN Kerberos-Sec (TCP) Denied Connection

Page: [1]

Message

<< Older Topic Newer Topic >>

Site to site VPN Kerberos-Sec (TCP) Denied Connection - 21.Oct.2008 10:30:44 AM

DatDamnZotz

Posts: 8
Joined: 18.Nov.2004
Status: offline

I have a IPSec site to site vpn tunnel setup and the clients on the remote site are seeing slow login times.

192.168.0.0 <-> Netopia router <-> IPSec site to site <-> ISA 2006 SE 192.168.1.0

Tunnel is up and have two rules allowing All Outbound protocols from both networks:

Computers can ping both directions.

The site to site is setup as Route, not NAT

Allow access to 192.168.0.0 to 192.168.1.0
All Outbound Protocols

Allow access to 192.168.1.0 to 192.168.0.0
All Outbound Protocols

Kerberos-Sec (TCP) is defnined as a protocol using 88 Outbound. Default loaded with ISA 2006

In the logs I am seeing

192.168.0.102 FW - TCP - No - 67.x.x.x.x 10/21/2008 1:56:10 PM 0 0 0 0xc0040017 FWX_E_TCP_NOT_SYN_PACKET_DROPPED 0x0 0x0 Firewall - 10/21/2008 7:56:10 AM 192.168.0.102 4206 192.168.1.8 88 Kerberos-Sec (TCP) Denied Connection To 192.168.1.0 - - 45 00 00 28 64 8a 00 00 7f 06 54 87 c0 a8 00 66 c0 a8 01 08 10 6e 00 58 0b b2 1d 95 0b b2 1d 95 50 04 00 00 c9 cd 00 00

All other traffic seems to work fine (http, ftp etc) except Kerberose-Sec TCP.

Anyone have any ideas?