This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Network exclusion

Hi,
we're using an asg220 with web security.
Several xp clients need to run a vpn software to connect to some private web resources.
Obviously when astaro try to proxy this traffic it show an "host not found" message because it's not able to reach the destination address.
How is possible to solve this problem?
Thank you!

This thread was automatically locked due to age.

0 UrsWeiss over 16 years ago

What kind of VPN software is it?? SSL, IPSEC, PPTP, L2TP, ... ?
Cancel
Vote Up 0 Vote Down

Cancel
0 quartino over 16 years ago

cisco ipsec
Cancel
Vote Up 0 Vote Down

Cancel
0 UrsWeiss over 16 years ago in reply to quartino

You try to proxy IPSec traffic???? [:S]

Maybe you only need to open necessary ports for IPSEC?
Cancel
Vote Up 0 Vote Down

Cancel
0 quartino over 16 years ago

We're using ASG only as a web proxy (no network security).
I would like to know how is possible to avoid a specific traffic to be not forwarded to the proxy from the browser.
Cancel
Vote Up 0 Vote Down

Cancel
0 UrsWeiss over 16 years ago in reply to quartino

Maybe i understand you totally wrong...

When you user normally browse, they are proxyed over the Astaro.
They have a IPSEC VPN client to connect to an other network.

Where does the error shows up? When they try to start the VPN connection, or when they browse the web when they are connected to the VPN?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 16 years ago

You say the ASG is not being used for network security... Does that mean you have a packet filter rule, 'Any -> Any -> Any : Allow'? If not, then you need to open the appropriate ports for IPsec traffic.

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
0 quartino over 16 years ago

The vpn is run on the client so only the client is able to reach the network, the traffic does not pass trough the astaro.
I solved this problem creating a proxy.pac script published in http.
Cheers.
Andy
Cancel
Vote Up 0 Vote Down

Cancel