[RayPesek]

VPN Tunnel's: up and chirping
SecureRemote Login: active and ready
Internal to Internet traffic: flowing nicely
---------------------------------------
I just had this precise issue on Nokia following some maintenance. Everything hitting the true external IP worked but nothing using automatic proxy ARP worked.

I don't know whether it was that I pushed the policy with the Internet line disconnected or what, but a second policy push fixed everything.

Do you have the SmartCenter on the enforcement module? It sort of sounds like it.

If so, I'd consider breaking the SmartCenter off to its own box and re-doing the enforcement modules with SPLAT. You're working with an operating system that is pretty much end of life and a firewall vendor that is cutting edge. Maybe the two aren't playing nice.

I've never used FW-1 on Windows, so I don't know if the local.arp file even works. A small voice in my head is saying it doesn't.

FWIW,

Ray