Re: Cisco PIX and web access

On Mar 30, 4:26 am, Michał Iwaszko <z...@xxxxxxxxxx> wrote:
On 2007-03-29 19:01, chrismt...@xxxxxxxxx wrote:



On Mar 29, 3:55 am, Michał Iwaszko <z...@xxxxxxxxxx> wrote:
On 2007-03-28 20:56, chrismt...@xxxxxxxxx wrote:

We have some VPN users who cannot access our company website or
Outlook over the Web site when connected to the Company VPN. They can
access any other website except ours. When they disconnect from the
company VPN, they can access our company websites fine.
I checked their Cisco VPN client, and they DO have "Allow local LAN
access" checked.
Is there anything else I should be looking for?
Where's the website, where's the VPN tunnel terminated, what their LAN
has to do with it?

The website is located on a server on our network behind our Cisco PIX
506e firewall. I am not sure where the VPN tunnel is terminated...how
could I find that out?

If I get it all right, those VPN Client users that connect to Your VPN
Concentrator (something that terminates their VPN connections) can't
access websites that are located somewhere in Your network and are NATed
on public addresses (they can access them without the VPN connection),
right?

PS. "Allow local LAN access" option makes the route to their LAN still
available after the VPN tunnel goes up.

--
Michał Iwaszko

Correct, the VPN users, when connected to the company VPN cannot
access publically available company websites. And I do have the Allow
local LAN access checkbox checked in their VPN Client software.
However when they disconnect from our VPN, they CAN access those
websites. So for some reason, being connected to the VPN is
preventing them from accessing the company websites.

By the way, we are using a Cisco PIX 506e with the 6.3 software. The
PIX is our firewall/VPN and all of our servers are behind the PIX.

Thanks


.

Relevant Pages

  • Re: Cisco PIX and web access
    ... Outlook over the Web site when connected to the Company VPN. ... Where's the website, where's the VPN tunnel terminated, what their LAN ... Concentrator (something that terminates their VPN connections) can't ...
    (comp.dcom.sys.cisco)
  • Re: Cant auth. on remote server using cable ISP dhcp settings
    ... > Maybe I'm missing something here, but are you using a VPN client or TSWeb, ... >> laptop cannot log on to any of the websites. ... so I configured my home dhcp to pass me the same as I get ... >> ping by fqdn and get a response, but it just dies on the auth part. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Certificate to secure VPN
    ... > How can I use a certificate to validate users access to ISA2004 VPN? ... look at the following websites: ... Prev by Date: ...
    (microsoft.public.isa.vpn)
  • Re: Industry Standard Security and guest wifi access best practice
    ... with IPSEC VPN clients has not been positive. ... Then they probably won't support other forms of security. ... to switch all connections into SSL mode. ... Use WPA to encrypt wireless traffic, ...
    (alt.internet.wireless)
  • Re: VPN between office and Home
    ... Hard Drive as my second location backup for my SBS2003. ... On the XP box at home, go to Control Panel -> Network Connections. ... for my second location backup my main server files. ... That is why I want to get a VPN ternnel instead of client VPN or RWW. ...
    (microsoft.public.windows.server.sbs)