Firewall Blocking when off


Go Back   Computer Help Articles > Windows XP Security Admin
User Name
Password
FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
Thread Tools Search this Thread Display Modes
  #1  
Old 01-05-2006, 04:18 AM
Chrsi
 
Posts: n/a
Default Firewall Blocking when off

I have recently load SP2. The problem I am having is with a VPN Client being
blocked. I have turned off the firewall completely, but I still can not use
the VPN.

I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
tasks, but when I get to the fianl stage of bring up a security banner, the
banner is blocked and I am unable to accept the security message. I am than
disconnected.

The Cleint work without any problems before SP2. I did have to disable the
firewall on the network connection to allow it to work.

Any idea what would be blocking the banner test. The banner test is a
pop-up window.

The Client is the Nortel VPn client.
Reply With Quote
  #2  
Old 01-05-2006, 04:18 AM
Vanguard \(NPI\)
 
Posts: n/a
Default Re: Firewall Blocking when off

"Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
>I have recently load SP2. The problem I am having is with a VPN Client
>being
> blocked. I have turned off the firewall completely, but I still can not
> use
> the VPN.
>
> I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
> tasks, but when I get to the fianl stage of bring up a security banner,
> the
> banner is blocked and I am unable to accept the security message. I am
> than
> disconnected.
>
> The Cleint work without any problems before SP2. I did have to disable
> the
> firewall on the network connection to allow it to work.
>
> Any idea what would be blocking the banner test. The banner test is a
> pop-up window.
>
> The Client is the Nortel VPn client.



What happens when you put the domain in the URL entered in the web browser
in your Trusted Sites security zone? Could be the popup blocker in IE or
another setting under the Internet security zone is preventing the VPN
connect. If you have IE's popup blocker disabled, maybe you have a popup
blocker enabled in some other product, like anti-virus software,
anti-spyware software, etc.

--
_________________________________________________
| ** Reply to the newsgroup. Share with others ** |
| E-mail: Remove "NIX" and add "#LAH" to Subject. |
|_________________________________________________ |


Reply With Quote
  #3  
Old 01-05-2006, 04:18 AM
Steven L Umbach
 
Posts: n/a
Default Re: Firewall Blocking when off

You don't give a lot of information about configuration but if you are using
l2tp and if NAT used in the path between the client and server then the
problem could be the way SP2 handles NAT-T which is changed with the
installation of the SP2. Also since it works when the hardware firewall is
disabled check the firewall logs to see what traffic is being
blocked/dropped from the client computer. --- Steve

http://support.microsoft.com/default.aspx?kbid=885407 --- XP SP2 and NAT-T


"Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
>I have recently load SP2. The problem I am having is with a VPN Client
>being
> blocked. I have turned off the firewall completely, but I still can not
> use
> the VPN.
>
> I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
> tasks, but when I get to the fianl stage of bring up a security banner,
> the
> banner is blocked and I am unable to accept the security message. I am
> than
> disconnected.
>
> The Cleint work without any problems before SP2. I did have to disable
> the
> firewall on the network connection to allow it to work.
>
> Any idea what would be blocking the banner test. The banner test is a
> pop-up window.
>
> The Client is the Nortel VPn client.



Reply With Quote
  #4  
Old 01-05-2006, 04:18 AM
Chrsi
 
Posts: n/a
Default Re: Firewall Blocking when off

Thanks for the insight, but this di not resolve my issue.

All pop-up blockers are off. Secondly, I can not add an IP address to the
Trust Sites, must be http.

Are there any other setting associated with the firewall? As I have stated
before, the client worked fine prior to SP2 and the new firewall scheme.

Seem like firewall is blocking a port even when disabled.


Ideas appreciated.
"Vanguard (NPI)" wrote:

> "Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
> news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
> >I have recently load SP2. The problem I am having is with a VPN Client
> >being
> > blocked. I have turned off the firewall completely, but I still can not
> > use
> > the VPN.
> >
> > I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
> > tasks, but when I get to the fianl stage of bring up a security banner,
> > the
> > banner is blocked and I am unable to accept the security message. I am
> > than
> > disconnected.
> >
> > The Cleint work without any problems before SP2. I did have to disable
> > the
> > firewall on the network connection to allow it to work.
> >
> > Any idea what would be blocking the banner test. The banner test is a
> > pop-up window.
> >
> > The Client is the Nortel VPn client.

>
>
> What happens when you put the domain in the URL entered in the web browser
> in your Trusted Sites security zone? Could be the popup blocker in IE or
> another setting under the Internet security zone is preventing the VPN
> connect. If you have IE's popup blocker disabled, maybe you have a popup
> blocker enabled in some other product, like anti-virus software,
> anti-spyware software, etc.
>
> --
> _________________________________________________
> | ** Reply to the newsgroup. Share with others ** |
> | E-mail: Remove "NIX" and add "#LAH" to Subject. |
> |_________________________________________________ |
>
>
>

Reply With Quote
  #5  
Old 01-05-2006, 04:19 AM
Vanguard \(NPI\)
 
Posts: n/a
Default Re: Firewall Blocking when off

"Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
newsCB762F1-443A-43C6-B3DF-24276001D358@microsoft.com...
> Thanks for the insight, but this di not resolve my issue.
>
> All pop-up blockers are off. Secondly, I can not add an IP address to the
> Trust Sites, must be http.
>
> Are there any other setting associated with the firewall? As I have
> stated
> before, the client worked fine prior to SP2 and the new firewall scheme.
>
> Seem like firewall is blocking a port even when disabled.
>
>
> Ideas appreciated.
> "Vanguard (NPI)" wrote:
>
>> "Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
>> news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
>> >I have recently load SP2. The problem I am having is with a VPN Client
>> >being
>> > blocked. I have turned off the firewall completely, but I still can
>> > not
>> > use
>> > the VPN.
>> >
>> > I loaded the VPN after the SP2 was complete. The VPN goes thru all of
>> > the
>> > tasks, but when I get to the fianl stage of bring up a security banner,
>> > the
>> > banner is blocked and I am unable to accept the security message. I am
>> > than
>> > disconnected.
>> >
>> > The Cleint work without any problems before SP2. I did have to disable
>> > the
>> > firewall on the network connection to allow it to work.
>> >
>> > Any idea what would be blocking the banner test. The banner test is a
>> > pop-up window.
>> >
>> > The Client is the Nortel VPn client.

>>
>>
>> What happens when you put the domain in the URL entered in the web
>> browser
>> in your Trusted Sites security zone? Could be the popup blocker in IE or
>> another setting under the Internet security zone is preventing the VPN
>> connect. If you have IE's popup blocker disabled, maybe you have a popup
>> blocker enabled in some other product, like anti-virus software,
>> anti-spyware software, etc.



Disable the option to require HTTPS when adding a site to the Trusted Sites
security zone. You could add the site into the registry key used to record
these sites within a zone, but doing it through Internet Options and its
Security tab is easiest.

--
_________________________________________________
| ** Reply to the newsgroup. Share with others ** |
| E-mail: Remove "NIX" and add "#LAH" to Subject. |
|_________________________________________________ |


Reply With Quote
  #6  
Old 01-05-2006, 04:19 AM
Chrsi
 
Posts: n/a
Default Re: Firewall Blocking when off

Sorry about missing details;

I use a cable modem. I have no other firewall software. I am using Norton
Anti-Virus. The program is Nortel VPN Client v4_15.

I do see the the NAT T is disable for the client, so I assume it is not
used.

I use the VPN to tunnel into my corporate network.

The issue is the last stage of the log in. Where the Client returns a
Banner Display box with security information. As a user, I must accept to
log on. The issue is the banner never pops up.

I have no pop-up blockers active. I did check.

Prior to SP2 update, I am able to run the VPN CLient. The firewall in SP1
must be disabled. Once SP2 is loaded, I have the problem, even with the
Firewall protect fully disabled.

Does the firewall still block ports when disabled?

Other users in my company use the VPn and have SP2 without issues.

I apprecaite the assistance.

"Steven L Umbach" wrote:

> You don't give a lot of information about configuration but if you are using
> l2tp and if NAT used in the path between the client and server then the
> problem could be the way SP2 handles NAT-T which is changed with the
> installation of the SP2. Also since it works when the hardware firewall is
> disabled check the firewall logs to see what traffic is being
> blocked/dropped from the client computer. --- Steve
>
> http://support.microsoft.com/default.aspx?kbid=885407 --- XP SP2 and NAT-T
>
>
> "Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
> news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
> >I have recently load SP2. The problem I am having is with a VPN Client
> >being
> > blocked. I have turned off the firewall completely, but I still can not
> > use
> > the VPN.
> >
> > I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
> > tasks, but when I get to the fianl stage of bring up a security banner,
> > the
> > banner is blocked and I am unable to accept the security message. I am
> > than
> > disconnected.
> >
> > The Cleint work without any problems before SP2. I did have to disable
> > the
> > firewall on the network connection to allow it to work.
> >
> > Any idea what would be blocking the banner test. The banner test is a
> > pop-up window.
> >
> > The Client is the Nortel VPn client.

>
>
>

Reply With Quote
  #7  
Old 01-05-2006, 04:19 AM
Steven L Umbach
 
Posts: n/a
Default Re: Firewall Blocking when off

Your best bet would be to consult with IT support at work. Troubleshooting
VPN connections can be complex and require network tracing and viewing the
logs on the VPN server. The Windows Firewall should not be blocking any
traffic when it is indeed disabled. The command netsh firewall show state
will show more information on the Windows Firewall configuration.
Operational mode should show disabled if it is indeed not being used. It
could also be a problem with the VPN client program as some needed
"adjustments" to work with SP2. -- Steve


"Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
news:BF34C2D6-4F40-407A-848C-BB3584B2B3E6@microsoft.com...
> Sorry about missing details;
>
> I use a cable modem. I have no other firewall software. I am using
> Norton
> Anti-Virus. The program is Nortel VPN Client v4_15.
>
> I do see the the NAT T is disable for the client, so I assume it is not
> used.
>
> I use the VPN to tunnel into my corporate network.
>
> The issue is the last stage of the log in. Where the Client returns a
> Banner Display box with security information. As a user, I must accept to
> log on. The issue is the banner never pops up.
>
> I have no pop-up blockers active. I did check.
>
> Prior to SP2 update, I am able to run the VPN CLient. The firewall in SP1
> must be disabled. Once SP2 is loaded, I have the problem, even with the
> Firewall protect fully disabled.
>
> Does the firewall still block ports when disabled?
>
> Other users in my company use the VPn and have SP2 without issues.
>
> I apprecaite the assistance.
>
> "Steven L Umbach" wrote:
>
>> You don't give a lot of information about configuration but if you are
>> using
>> l2tp and if NAT used in the path between the client and server then the
>> problem could be the way SP2 handles NAT-T which is changed with the
>> installation of the SP2. Also since it works when the hardware firewall
>> is
>> disabled check the firewall logs to see what traffic is being
>> blocked/dropped from the client computer. --- Steve
>>
>> http://support.microsoft.com/default.aspx?kbid=885407 --- XP SP2 and
>> NAT-T
>>
>>
>> "Chrsi" <Chrsi@discussions.microsoft.com> wrote in message
>> news:71A1790E-45B4-42D1-AB9B-C7FE865DB49C@microsoft.com...
>> >I have recently load SP2. The problem I am having is with a VPN Client
>> >being
>> > blocked. I have turned off the firewall completely, but I still can
>> > not
>> > use
>> > the VPN.
>> >
>> > I loaded the VPN after the SP2 was complete. The VPN goes thru all of
>> > the
>> > tasks, but when I get to the fianl stage of bring up a security banner,
>> > the
>> > banner is blocked and I am unable to accept the security message. I am
>> > than
>> > disconnected.
>> >
>> > The Cleint work without any problems before SP2. I did have to disable
>> > the
>> > firewall on the network connection to allow it to work.
>> >
>> > Any idea what would be blocking the banner test. The banner test is a
>> > pop-up window.
>> >
>> > The Client is the Nortel VPn client.

>>
>>
>>



Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
Sp2 firewall and VPN connection pdx Windows XP Security Admin 1 01-05-2006 05:03 AM
SP2 Firewall mods via Login Script LVDave Windows XP Security Admin 2 01-05-2006 04:17 AM
Firewall blocking IPv6 multicast. hacxman@gmail.com Windows XP Security Admin 0 01-05-2006 04:15 AM
Blocking programs with Windows Firewall (my pesky problem) DestroyerLXXVII@gmail.com Windows XP Network Web 4 01-05-2006 04:01 AM
My words Panda_man Windows XP New Users 4 01-05-2006 02:53 AM


All times are GMT. The time now is 04:38 AM.


Powered by vBulletin Version 3.5.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd. SEO by vBSEO 2.3.2 © 2005, Crawlability, Inc.

Firewall Blocking when off