Firewall Blocking when off

[Guest]

I have recently load SP2. The problem I am having is with a VPN Client being
blocked. I have turned off the firewall completely, but I still can not use
the VPN.

I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
tasks, but when I get to the fianl stage of bring up a security banner, the
banner is blocked and I am unable to accept the security message. I am than
disconnected.

The Cleint work without any problems before SP2. I did have to disable the
firewall on the network connection to allow it to work.

Any idea what would be blocking the banner test. The banner test is a
pop-up window.

The Client is the Nortel VPn client.

 

[Vanguard \(NPI\)]

I have recently load SP2. The problem I am having is with a VPN Client
being
blocked. I have turned off the firewall completely, but I still can not
use
the VPN.

I loaded the VPN after the SP2 was complete. The VPN goes thru all of the
tasks, but when I get to the fianl stage of bring up a security banner,
the
banner is blocked and I am unable to accept the security message. I am
than
disconnected.

The Cleint work without any problems before SP2. I did have to disable
the
firewall on the network connection to allow it to work.

Any idea what would be blocking the banner test. The banner test is a
pop-up window.

The Client is the Nortel VPn client.

What happens when you put the domain in the URL entered in the web browser
in your Trusted Sites security zone? Could be the popup blocker in IE or
another setting under the Internet security zone is preventing the VPN
connect. If you have IE's popup blocker disabled, maybe you have a popup
blocker enabled in some other product, like anti-virus software,
anti-spyware software, etc.

 

[Steven L Umbach]

You don't give a lot of information about configuration but if you are using
l2tp and if NAT used in the path between the client and server then the
problem could be the way SP2 handles NAT-T which is changed with the
installation of the SP2. Also since it works when the hardware firewall is
disabled check the firewall logs to see what traffic is being
blocked/dropped from the client computer. --- Steve

http://support.microsoft.com/default.aspx?kbid=885407 --- XP SP2 and NAT-T

 

[Guest]

Thanks for the insight, but this di not resolve my issue.

All pop-up blockers are off. Secondly, I can not add an IP address to the
Trust Sites, must be http.

Are there any other setting associated with the firewall? As I have stated
before, the client worked fine prior to SP2 and the new firewall scheme.

Seem like firewall is blocking a port even when disabled.


Ideas appreciated.

 

[Vanguard \(NPI\)]

Thanks for the insight, but this di not resolve my issue.

All pop-up blockers are off. Secondly, I can not add an IP address to the
Trust Sites, must be http.

Are there any other setting associated with the firewall? As I have
stated
before, the client worked fine prior to SP2 and the new firewall scheme.

Seem like firewall is blocking a port even when disabled.


Ideas appreciated.

Disable the option to require HTTPS when adding a site to the Trusted Sites
security zone. You could add the site into the registry key used to record
these sites within a zone, but doing it through Internet Options and its
Security tab is easiest.

 

[Guest]

Sorry about missing details;

I use a cable modem. I have no other firewall software. I am using Norton
Anti-Virus. The program is Nortel VPN Client v4_15.

I do see the the NAT T is disable for the client, so I assume it is not
used.

I use the VPN to tunnel into my corporate network.

The issue is the last stage of the log in. Where the Client returns a
Banner Display box with security information. As a user, I must accept to
log on. The issue is the banner never pops up.

I have no pop-up blockers active. I did check.

Prior to SP2 update, I am able to run the VPN CLient. The firewall in SP1
must be disabled. Once SP2 is loaded, I have the problem, even with the
Firewall protect fully disabled.

Does the firewall still block ports when disabled?

Other users in my company use the VPn and have SP2 without issues.

I apprecaite the assistance.

 

[Steven L Umbach]

Your best bet would be to consult with IT support at work. Troubleshooting
VPN connections can be complex and require network tracing and viewing the
logs on the VPN server. The Windows Firewall should not be blocking any
traffic when it is indeed disabled. The command netsh firewall show state
will show more information on the Windows Firewall configuration.
Operational mode should show disabled if it is indeed not being used. It
could also be a problem with the VPN client program as some needed
"adjustments" to work with SP2. -- Steve