Problems with Netscreen 5XP and VIP

[hhsu1126]

I'm trying to setup NAT for custom services using my Netscreen 5 and an old version of the OS (2.6.1r1.1), but it doesn't seem as though the NAT for the custom services is working correctly. Using default services for port 80 and 443, everything works fine. However when I create custom services, they don't work. I hope somebody can point out what I'm doing wrong. Here's what I'm doing:

Created new Service for SQL Server
src Port 1433 (low) to 1433 (high) dest 1433 for TCP and UDP
Created VIP for Untrusted IP
Created Service for VIP
Created Policy for Incoming - Source Address - Any, Dest Address - VIP::1, Service SQL Server, NAT on DIP Off

The settings I am using are identical to the way I setup HTTP and HTTPS (which are working), but the SQL server is not working.

Any help would be much appreciated --

 

[Packet7]

Hello,

Doesn't your service need a wider ranger for SQL? Try:

Src: 1 - 65535 Dest: 1433 TCP

Rgds,

John