microsoft-ds

[oliver]

hello,

we´ve enabled (because development wants :-)) SMB from net_inside to net_dmz. after doing a net use * \\.. /user:xx about 30 seconds (!) elapsed before password-request appears.

any idea to get it faster?

rule 1: any any NBT drop
rule x: net_inside net_dmz microsoft-ds accept

thanks in advance for any reply!

kind regards from innsbruck
/oliver

[kva.kva]

Do you have any additional information about this connection in your Tracker for CP?
Do this problem connect to smb only?

[oliver]

no additional information available in smart view tracker - only the allow-packet after those 30 seconds.

we´re using R55 SPLAT HFA_17

[Sergej]

This can be DNS issue. All windows NT5.X communications are hardly depends on DNS. Make sure that DMZ server registered to an internal DNS (use sniffer to detect network activity on the client side while connecting to DMZ server). Try to authenticate to DMZ server via "net use" command.

[kva.kva]

Sergej is write, i think. Also you can use fw monitor to observe packets through CP.

[oliver]

sergej, you´re right - it works fine now, thanks a lot!

kind regards,
/oliver