This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Site 2 Site VPN - Cannot access Websites at Remote Office

Hello everyone,

i set up one ASG 425 and one ASG 120 with IPsec Site 2 Site.

There is no problem with the communication (AD, WSUS etc)

But when i try to open a website (of an HP printer for example) at remote office from HQ Network i get a connection timeout. The other way it works.
When i connect via RDP on a server at the remote office i also can open the webpage (so it isn't a problem of the printer).

Packetfilters are set.
HTTP/S ports are open from internal networks to Any.

Is this a NAT Problem or something like this ?

Thanks for your answers
Stephan

This thread was automatically locked due to age.

Parents

0 BAlfson over 16 years ago

Do you have any blocks in your HTTP proxy to prevent access to internal devices from a DMZ or other net allowed to use the proxy?

And, here's another thing to try: https://community.sophos.com/products/unified-threat-management/astaroorg/f/55/t/43966

Please post the solution.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 StephanG over 16 years ago in reply to BAlfson

Thanks for your quick answer.

They are all allowed to use the proxy. But i discovered when i set an host into the "Transparent mode skiplist". I can access the websites from this host.

So what does that mean ? The website is not an asp page.

Can i set that every internal website is not going over the proxy ?

Thanks
Stephan
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to StephanG

Yes. On each Astaro, put the Remote Networks* used in the Remote Gateway definition into the skiplist.

Timeouts are often caused by the anti-virus, so, instead, you might experiment with an exception for the devices that timeout when you access them.

Cheers - Bob
* Note for future readers: If you've used 'Any' in the Remote Gateway definition because you want all Internet traffic to go via the VPN, then you'll probably want to add network definitions for just the remote networks of the other site instead of 'Any'.
Cancel
Vote Up 0 Vote Down

Cancel
0 StephanG over 16 years ago in reply to BAlfson

It seems like this solved all my problems. Thank you.
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago in reply to StephanG

Please tell us what solved the problem.

Thanks - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 16 years ago in reply to StephanG

Please tell us what solved the problem.

Thanks - Bob
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data