This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Astaro Bridge kills Windows Share

Hi All,

Have an interesting one.  Suggests Astaro Bridge kills Windows share protocol. 

If we plug a (manually configured) laptop directly into the MPLS WAN router, then we can open remote shares, join domains, etc.   No problems.  Fast response.  All nice.  

When we just put an Astaro bridge between the laptop and the WAN router - we cannot open the same remote shares.  Can see the traffic being passed, NetBios, 445/SMB, etc.   However, there must be traffic being silent-killed - and cannot tell what, short of using Wireshark both sides of the bridge to find out what is dropped. 

All the normal stuff works just fine across the bridge.  We can still join the domain.  RDP, FTP, etc.  Just windows shares is killed.  We are using Win Server 2003.  The Windows diagnostic is as useful as a chocolate teapot.  

Anyone any thoughts, please?    

My reading suggests that it is NetBios broadcast traffic that is likely being dropped.   The standard workaround for that is to enable, and use WINS server.   However, WINS server is deprecated and will stop being used by uSoft.  Also WINS is not currently needed to be used anywhere else in their 5 site network.  So is tough to argue that for this one just for Astaro .....   Customer is sure that Cisco would do this just fine.  It seems likely to me that a Cisco bridge would have less impact than the Astaro one.  But is that right? 

Thanks in advance for any thoughts or comments.

All the best,

Adrien.


This thread was automatically locked due to age.
Parents
  • I've not seen that issue before.

    Best to run TCPDUMP on the bridge interface on the UTM, and look at it in WireShark.  If you have Standard or Premium Support, I recommend you start a support case if you're not too familiar with troubleshooting TCP/UDP sessions in detail.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Reply
  • I've not seen that issue before.

    Best to run TCPDUMP on the bridge interface on the UTM, and look at it in WireShark.  If you have Standard or Premium Support, I recommend you start a support case if you're not too familiar with troubleshooting TCP/UDP sessions in detail.

    CTO, Convergent Information Security Solutions, LLC

    https://www.convergesecurity.com

    Advice given as posted on this forum does not construe a support relationship or other relationship with Convergent Information Security Solutions, LLC or its subsidiaries.  Use the advice given at your own risk.

Children
No Data