[8.970][QUESTION] Firewall is blocking ssl vpn access from UTM 9 to 8.3

I upgrade my home firewall to UTM 9.  I can no longer connect to an office  thru vpn client.  The office is set up and using version 8.3.  I have no troubles connecting outside of my home network.  I am using a MAC and Viscosity VPN client.  I see the following line in the Firewall live log:

Default DROP TCP
: 443   → : 55819
[ACK RST] len=40 ttl=61 tos=0x00 srcmac=0:4:23:a8:ab:e5

I have tried adding the following firewall rule:   1:65535 → 443  but nothing changes.

Not sure what else to try?

0 kbr over 12 years ago

Can you please explain what you mean with "external" and "internal" IP? Is "external" the IP of the UTM or the IP of your office?

Generally i'd guess that there's a masquerading rule missing...

Cheers,
Kai
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 ppulli over 12 years ago

External is the IP of Office and Internal is the IP of my UTM 9. Please expound on masquerade rules.
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel
0 kbr over 12 years ago

Sorry, forget about the masquerading.

The log says that the UTM drops a packet from your office. That dropped packet has the ACK and the RST flag set. The ACK/RST flag combination indicates that the port 443 is closed (or firewalled) on the OFFICE side, ie. this is what you get when you try to establish a connection to a remote system and the system does not run the service that you are trying to connect to. In most cases this is due to a typo (wrong IP-address or a wrong port).

Cheers,
Kai
Cancel
Vote Up 0 Vote Down

Sign in to reply

Verify Answer

Cancel

[8.970][QUESTION] Firewall is blocking ssl vpn access from UTM 9 to 8.3

Submitted a Tech Support Case lately from the Support Portal?