Re: Browsing WIndows Network "broken" with Symantec VPN/100 firewall appliance

From: Lars M. Hansen (badnews@hansenonline.net)
Date: 11/17/02


From: Lars M. Hansen <badnews@hansenonline.net>
Date: Sun, 17 Nov 2002 01:50:27 GMT

On Sat, 16 Nov 2002 09:47:33 -0800, The OTHER Kevin in San Diego <skiddz
*AT* adelphia *DOT* net> spoketh

>Sigh.. The problems continue. In our last episode, it was discovered
>remnants of ZAP hosed up web browsing via search engines. This time,
>the problem is browsing the Windows network.
>
>If I run a crossover cable between the two machines, browsing works
>fine. We can map drives, share printers etc. NBTSTAT reports all the
>usual "good" things one would expect when NetBIOS over TCP/IP is
>working.
>
>If I plug the machines back in to the firewall, all NetBIOS activity
>comes to a grinding halt. Can't browse, can't map drives (even by
>IP!) etc...
>
>The firewall appliance is a Symantec VPN/100 appliance and I've
>upgraded the firmware to version 15T.
>
>Nothing in the Symantec KB mentions LAN Browsing except a small blurb
>in the "Troubleshooting the Top 10 things you may have f****d up
>during installation" that says "LAN Browsing functions may not work
>properly" and to "verify that all computers are on the same Workgroup
>or Domain. Then, ensure that File & Print Sharing is enabled on the
>computers that share folders."
>
>Well duh.. :)
>
>Anyone seen this with one of these devices? I don't have to make a
>Special Application tweak do I? As I understand it, those are port
>triggers for outbound traffic and shouldn't affect stuff on the LAN
>side...
>
>Ideas anyone???
>

Works fine on my SFV/100 .. There's no need for a special application
"tweak" (I assume the two computers are connected on the LAN side...)

Can you ping from one host to another? Are they all DHCP or static IP.
Have you tried using the search/find computer to locate the other
computers on the LAN? NetBIOS doesn't like it when IP addresses changes,
and using Search (W2K, WXP) or Find (W9x, NT) will clean up the local
name database does usually get your network browsing working again.

Hope that helps ...

Lars M. Hansen
http://www.hansenonline.net
(replace 'badnews' with 'lars' in e-mail address)



Relevant Pages

  • Re: Help with long term network problem
    ... DATA by other machines on the LAN. ... Depending on the boot sequence of the computers this changed. ... dispensing with the dedicated server and just using on as file ...
    (microsoft.public.windowsxp.network_web)
  • Re: Linux Server, Please Help
    ... and squid with adzapper set up to be a transparent proxy. ... On the LAN is a network printer, and other computers running, ... outgoing mail and wait for a connection before sending to the ...
    (Debian-User)
  • Re: non domain computers on network
    ... I need the security reasons spelled out - links are fine I ... new computer and bring thier PC with them and plug into the LAN. ... computers on their separate VLAN, and have then connected to the printers ... (assuming these are network printers). ...
    (microsoft.public.windows.server.networking)
  • Re: Windows XP Pro security question
    ... I have inherited a small business LAN of 7 computers running Win XP Pro /SP2 ... is there any way 'reset' the file system permissions back to the ...
    (microsoft.public.windowsxp.general)
  • Re: ?router problem-blocking ports 137-8
    ... On Sat, 28 Jun 2003 19:08:42 GMT, Lars M. Hansen ... >packets you see are simply Windows broadcast packets. ... >the computers on your network are looking for other computers on your ... >network, and that's the way Microsofts broadcast-based networking works. ...
    (comp.security.firewalls)