Unable to access server behind firewall

HCL Domino Domino Forum
1

I have a server connected to a Symantec Firewall/VPN device (#1). That device is connected to a switch and has 5 Public IP addresses available. I have opened ports 1352 on the Symantec Device (#1). I can connect to that server with Lotus Notes Client from other locations (addresses other that the 5 on the switch)

I have a second Symantec Firewall/VPN device (#2) attached to the same switch as the first Symantec device#1. Each of the Symantec devices has one of the public IP addessses as it WAN port. Each Symantec Device has DHCP turned on. The server on Symantec device #1 has 192.168.0.2 assigned to it. A web Server on Symantec Device #2 also has a 192.168.0.2 assigned. I can ping the public address of the other wan port from each server fine. Whenever I try to load the Notes Client on a machine attached to Symantec Device #2, It tells me it cannot find the server. I use the name and also try the IP address (the wan address)

I have set both Symantec Devices to open the private IP addresses assigned to the machines to DMZ to open all ports to see if it is a port filtering problem. But I still get the same thing. I have tried the Nping and it will not connect with or without the ports open.

I can also ping the nameserver of the Notes Server from a machine connected to Symnantec Device #2 fine.

Does anyone know why my Notes Client won’t connect in this situation?

2

Subject: Unable to access server behind firewall

Make sure you can ping the COMMON name of the notes server from the client: the notes client will use this unless you have a connection document in your personal address book specifying an alternate address.

If you search the support/knowledge base, there is a utility you can use to test network connections. Also try using the Trace option from User Preferences-> Ports as this will show you how the Notes client is trying to find the server. It may not be using the information you think it is!

3

Subject: RE: Unable to access server behind firewall

Thanks for the response.

We discovered that the Symantec Firewall/VPN box by default

blocks all outgoing traffic. There is a setting to allow this.

Once we found this it worked fine. If anyone else reads this it is a setting in Access Filters section.

Thanks!