Internal IP Traffic Problems

[Guest_imported]

I just bought a Cisco PIX 501 firewall and am having problems with my internal people some times being able to connect to other internal machines and then not being able to connect 5 minutes later. I have a user license of 10 and only 9 machines connected. Mapping drives seems to always work fine, but any direct IP types of communication I am having trouble with. Any suggestions?

 

[yizhar]

HI.

Post more details here:

What client and server OS used?
What ip addressing (ip assignment, subnet mask, default gateway)?
What name resolution (WINS, DNS) in use?
Are all computers in the same internal subnet?
What is your pix config?
You should implement SYSLOG (SYSLOG Server and/or PDM logging and/or "logging buffer&quot, then look for related problems.

If the clients are W2K pro, it might be a DNS problem, try to remove reference to external DNS server on a test client, to check if it is related to the problem.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[Guest_imported]

Clients are mix of w98, w2000, and a NT 4.0 Server. IP addressing is done by the pix using a 192.168.0.1/205 set through DHCP. NETBT is the main way to do DNS and then use an external DNS server for outside resolution. Gateway is the PIX.

Inside on the NT 4.0 box there is exchange and some websites installed and on a w2k box I have terminal services running. I have a lot of conduit and static commands.

Does this help?

 

[yizhar]

HI.

It helps but you should post here your pix version and config or at least the relevant parts of it (ip addressing, conduit).
What about SYSLOG messages??

Again, one important thing to check is DNS problems.
Did you try manual TCP/IP configuration with no external DNS servers on a test client???

Do you use WINS?

What problems and error messages you get at clients?

What kind of connections have problems - MS Outlook? File sharing?
Try to ping your server by its name and see what happens.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar