Symantec/Firewall VPN configuration

[fiazmalik]

One of our software vendor is trying to access our XP machine. The machine is behind the firewall "Symantec VPN/Firewall Appliance" the vendor wants the following changes made to be able to access the machine. I personally don't have a lot of experience with VPN. However, I have already made those changes but the vendor is not able to access the machine...I don't know what I am doing wrong...Can someone help. I would really appreciate it. Thanks in advance.

Symantec VPN hardware device:
Configure to allow XP PC to be accessible from the Internet.
A NAT address MUST be assigned to the Windows XP machine in order for any rules to work!
Network address translation from a public IP address to the XP PC's internal IP address.

Rules:
Terminal Services
Add a rule to allow the following:
WAN range xxx-xx-xxx-xx To xxx-xxx-xx-xxx Windows XP Machine IP Address for port xxxx
This will allow us to work on the PC


HTTP (Web Site)
Add a rule to allow the following:
WAN Range * (any)
To Windows XP Machine IP Address for port 80
This will allow access to IIS from the Internet.

I got the following message from the vendor.....


I cannot access the XP machine using the public address (66.0.155.170). I know that address is available over the internet because I can ping that address. The possible causes to this problem may be with the firewall. Do you know if the public address has been set up with NAT (network address translation) to the XP's internal IP address? If it has, do you know if firewall rules were configured (a firewall rule to allow HTTP from the WAN, a firewall rule to allow terminal services from the WAN and a firewall rule to allow PcAnywhere from the WAN) on the Symantec VPN hardware device?

 

[apeasecpc]

Which firewall do you have? You said "appliance" so I'm assuming a 100, 200, or 200r.

With these devices you configure the NAT and port passthrough under the virtual server or custom virtual server settings. For example if you have a web server behind the symantec appliance with an internal IP address of 192.168.1.1, you enable "WEB Server" in the virtual servers settings and enter that IP address. This sets up translation of port 80 of your public IP address to port 80 of the internal IP address of the web server.

There are several common services available under virtual servers. If you need translation to a port whos service is not listed there you would configure it under custom virtual servers.

You need to set up a virtual server for each port you wish to expose. Different ports may be configured to translated to a different internal IP address if necessary.

 

[fiazmalik]

Thank you so much...I am going to try these settings and let you know about the progress...thanks again...