PIX515E Timeout problem via inbound connection?

[hoinvip]

We have a Win2000 SP2 server running Metaframe XPs v1.0 (build 1360) SP2 FR2... This runs on a server at our head offices and sits behind a Cisco PIX 515E connected to a 2Mb DSL pipe... We have two remote offices: one connected via a Cisco PIX501 to 515E VPN and the other has one static IP address allowed to use port 1494. Both of these offices use 512Kbps DSL.

Recently the VPN connected office had to revert temporarily to using a translated connection through the firewall on port 1494 to the Citrix server which led to a massive impact. The users kept getting hit with timeouts whereby the connection dropped and presented an "error in connection" box which offered the option of a timed reconnect, reconnect now or cancel.

I went through a lengthy process of trying to tune the various TCPIP and ICA keepalive settings in the server registry but to no avail.. Eventually I got the remote office to restart using the VPN connection and Hey Presto! The problem stopped.

I can only assume that I need to amend the configuration for the PIX to optimise it to allow Port 1494 connections via a translated IP address. Does anyone have any idea what might have caused this and therefore how I can prevent this issue reoccurring in future?

Thanks in advance,


HoinviP

http://www.global-net.co.uk

 

[themut]

It could be due to the timeout conn setting on the PIX but I am just guessing. You need to troubleshoot the issue at the time it happens, I would advise you setup a syslog server to try to determine the reason for such behavior.