[isalist] IPSEC Site-2-Site Problem (connections dropping)

  • From: "Crisp, Paul \(UK\)" <pcrisp@xxxxxxxxxxxxxxxxx>
  • To: <isalist@xxxxxxxxxxxxx>
  • Date: Thu, 2 Aug 2007 08:31:55 +0100

Hi all, 

Its been a long time but that shows you how good ISA is :) 

OK, Got a IPSEC with pre-shared key site-2-site all working. The remote
end is using a Nokia Checkpoint firewall but hey, that's there loss :) 

Anyway down to the problem. 

As i say the link is working fine for the most part and we have remote
users on the other site running Outlook, RDP SQL Enterprise Manager and
connecting to resources in our site without issue apart from every now
and then and by no means on a daily basis a random client who is
connecting to us will not be able to ping a host in our network or their
application fails with a disconnect

The explain this further, imagine User A in remote site running Outlook
in cached mode all fine and then they will be suddenly disconnected. OK
no probs, run some ping tests to our Exchange server on the local site
and requests are timed out, ping any other host in the same subnet of
the Exchange server and all reply ok. This happens for about 20-25mins
and then all of a sudden things reply and Outlook runs fine until the
next time it fails. The next time could be later that day or could be a
couple of days away. 

As I said previously this is not necessarily an Outlook / Exchange
problem as we have other people using SQL Enterprise Manager and then
all of a sudden they are disconnected. Again perform some ping tests and
we get timed out to the SQL server but all other hosts in the same
subnet are ok. 

One further thing, the server that is not responding, if I remote
control that server (i'm in the same subnet as server) i can ping and
get replies from the non-working clients on the other side of the VPN 

Anyone got any clues? 

btw 

Running ISA 2004SE on Windows 2003 

Cheers all

Paul Crisp
Snr Network Support Analyst
 
-------------------------------------------------------------------------------------------

This e-mail, together with any attachments, is confidential between the sender 
and addressee(s). If you are not the intended recipient(s) of this e-mail you 
should not copy it or use it for any purpose nor disclose its contents to any 
person: to do so may be unlawful. If you have received this e-mail by mistake 
please notify the sender immediately by e-mail and delete this e-mail and any 
attachments from your system. To the maximum extent permitted by law, Metal 
Bulletin PLC accepts no liability for any loss or damage resulting from 
unauthorised use of this email or any attachment or from unauthorised use of 
any information contained or implied in the email or attachments.

Metal Bulletin PLC gives no warranty as to the security, accuracy or 
completeness of this e-mail, or any attachments, after it has been sent nor 
does it accept responsibility for any errors or omissions in the contents of 
this message which arise as a result of the e-mail transmission. The views and 
opinions of the sender are not necessarily those of Metal Bulletin Plc

Metal Bulletin PLC takes care to check all outgoing emails but any liability 
for any loss or damage resulting from any viruses that might accompany this 
email or any attachments is excluded to the fullest extent permitted by law. If 
you have reason to believe that this email or any attachment is contaminated 
with any form of virus please delete it from your system and advise us by 
return.

Metal Bulletin PLC reserves the right to monitor incoming and outgoing emails 
to investigate or detect any unauthorised use of our system or any other email 
system. As a result, we may monitor who is sending and/or receiving email, the 
subject of emails and the content of emails and we may collect related personal 
information about you within our email system. We will use this information for 
the purposes set out above and may also disclose it to relevant regulatory 
authorities.

Metal Bulletin PLC is a company registered in England and Wales under 
registered number 142215 and whose registered office is at 3 Park Terrace, 
Worcester Park, Surrey, KT4 7HY, England and whose VAT no is GB 232 4922 79.

Other related posts:

  • » [isalist] IPSEC Site-2-Site Problem (connections dropping)