VPN ASA Trusted to Untrusted errors

[tjbradford]

I have configured an ASA to allow users to vpn to our Offices, it works great and there able to access everything they require, however i have found that i'm unable to connect to there machines to support there systems, ie if i try to vnc it terminates my connection almost instantly , if i try to telnet it gives the error " Error: Must authenticate before using this service." if i try to "\\pc\c$" it says the system nolonger exists and if i run hfs.exe (mini http server) and try to browse the site it say "Error: Must authenticate before using this service." which i know doesn't require auth

in the log files it shows the following "Auth start for user `???` from (source ip)/58642 to (dest ip)/80"
if i try to start the http browser.

if i try to vnc i get the following user from (source ip) to (dest ip) /5900 on interface inside using tcp muct authenticate before using this service.

does anyone have any idea's ?

 

[andrewis]

Sounds like cut-through proxy is possibly configured?

Can you post your config please.

 

[tjbradford]

sust this one now thanks , it was a rule in the firewall policy asking for authentication from inside to outside , removed this rule and replaced with accounting and it works like a charm.

really had me scratching my head though.