CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Web Security > Connectra
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-07-23
Junior Member
 
Join Date: 2006-11-13
Location: Baltimore, MD
Posts: 16
Rep Power: 0
jgahan1978 has an average reputation (10+)
Send a message via AIM to jgahan1978
Default Can not connect to Connectra clients

Our IT team can not connect to Connectra clients. We use a VNC application to connect to remote computers to help troubleshoot problems. The problem is, we can not get to the remote computer that is connected using Connectra. We can not ping them or connect to them on any port.

Do we need to setup a route on our firewall for that network traffic? I tried to setup a route to send the traffic to the Connectra device, but that did not work. Is this even possible? Are there any workarounds?

Thanks!

Jeff
__________________
Jeff

CCSA, CCSE
Reply With Quote
  #2 (permalink)  
Old 2007-07-24
Senior Member
 
Join Date: 2007-06-04
Posts: 1,062
Rep Power: 3
mcnallym has an average reputation (10+)
Default Re: Can not connect to Connectra clients

How are they connected to the Connectra, is it via SNX or do they just https to the portal and then use the portal to access resources.
Reply With Quote
  #3 (permalink)  
Old 2007-07-26
Member
 
Join Date: 2005-09-04
Location: Perth
Posts: 40
Rep Power: 0
seanmac1904 has an average reputation (10+)
Default Re: Can not connect to Connectra clients

Hi There
I am assuming you mean your internal support using VNC on you SNX clients

to make this work you will need a Server to Client Network Application (that will be applied to all SNX clients) that specifies the IP range of your Connectra SNX clients are assigned and the VNC ports (5900?)

you will also need to make sure that clients are not NAT'd behind the connectra interface

the setting for this is under

Settings Button
SSL Network Extender sub button
Network Mode Settings section
Client Network Configuration box
untick the box next to "Connectra hides client connections behind the following IP:"


Finally the SNX client network (found in the section above) needs to routes back to the connectra

if all these steps are in place, you should have "No Worries" as we say where I am from :)

cheers

Sean
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 11:39.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0