Search results for query: *

GrimR I've read the document, but all seems correct. The strangest thing is that even internal mail above 10Mb is not getting through. The when I do a Get-Transportconfig it shows me unlimited. The result of the Get-SendConnector is This is the result from a Get-SendConnector AddressSpaces...

Hi Yes it is possible. Allthough it might be hard to configure the cisco pix. Regard Beecky

Hello Computerhighguy I don't agree with your tip. This is true when sending email to the internet. But we have also this problem when we try to send internal emails above 10Mb The transportcontrol show also that the maximum messagesize is Unlimited. This is the result from a Get-SendConnector...

Hi folks, We encounter some issues when sending emails above 10Mb. When we try to send these from our outlook client, we get the message "... reported error (0x80040610):'The message being sent exceeds the message size established for this user' I allready changed the Receiveconnector from...

Thanks for the reply ... Any other advice is welcome, I will check with our ASP programmer what he can do.

Mark, Our intention goes further than that. The centralized calender is only a part. Currently we go a lot further. Every employe can see how many vacation days are available, how many days he used allready. Also the different types of official holidays must be in there like, holiday, extra...

Hi, I would like to know if anybody has expirience with holiday management on an exchange server. We would like to centralize all the holiday requests for our employees. Currently we use a tool for this in lotus notes. But We are thinking to migrate to exchange, but off course we need migrate...

John, It's not possible to take captures on the inside because the edge has an inbound switch. Placing a hum on the external could be usefull, allthoug the traffic that you see there is encrypted so that wouldn't make sence either. rgds Beecky

John, No clear signs in the logging, and in the packet captures I don't see traffic in the tunnel. We will replace the netscreen with another WG. rgds Beecky

No luck with the captures, there is no traffic comming out of the tunnel. I will setup a syslog server and enable the hidden IKE trace in the watchguard. I keep you posted Beecky

Hi John, Good idea. I always ask my customers to take ethereal captures, and now I forgot it for myself ...(stupid) I will try to take some captures, but I can oly take them on the trusted site. I'll keep you posted rgds Beecky

John, 192.168.2.1 is the internal IP of the internet router. This router does NAT. On the LAN interface of the router I have 192.168.2.1 and the untrust IP of the NS is 192.168.2.2. There is not very mug to debug on the WG site, because of the poor logging. NAT shouldn't be the issue either...

****** 28588.0: <Trust/trust> packet received [60]****** ipid = 21879(5577), @000bb84e packet passed sanity check. trust:192.168.1.2/64307->192.168.119.1/512,1(8/0)<Root> chose interface trust as incoming nat if. search route to (192.168.1.2->192.168.119.1) in vr trust-vr for...

John, The vpn is not bound to a tunnel interface. Like you already said, there is no need to use tunnel interfaces in policy based vpn. I have removed the route. This is what is left in the routing table. ns5xp-> get route untrust-vr (0 entries)...

John, I have a a rule from trust to untrust that says Lan - Lan_Arlon action tunnel log enabled and I have a rule from untrust to trust that says Lan_Arlon - Lan action tunnel log enabled. Both rules are above the normal policy The service is any and the vpn tunnel is VPN_to_Arlon The proxy...

Hi John, I affraid that we are missing something basically. I have never configured a vpn on a netscreen so I don't know all the parameters. I have allready configured lots on watchguard an checkpoint, and the always worked. From what I see in the netscreen is that the packets to the...

John, Still no success. I have changed the "BIND TO" from none to tunnel zone "untrust tunnel". Phase1 and Phase 2 are completed succesfully, but stil no replies to ping. ns5xp-> get route untrust-vr (0 entries) -------------------------------------------------------------------------------- C...

Hi Jonh, ns5xp-> get route ip 192.168.119.1 Destination Routes for 192.168.119.1 --------------------- trust-vr : => 0.0.0.0/0 (id=4) via 192.168.2.1 (vr: trust-vr) Interface untrust , metric 1 Maybe the tunnel interface is the problem. I thought tunnel interfaces...

John, The tunnel are up. The first one is the Branch office, the other is an Mobile User ns5xp-> get sa total configured sa: 2 HEX ID Gateway Port Algorithm SPI Life:sec kb Sta PID vsys 00000005< 84.194.173.119 500 esp:3des/md5 55cce06f 3580 unlim A/U 29 0...

John, I don't have access to a PC behind the netscreen. I can start a ping from behind the netscreen, is that also ok ? Regards Beecky