|
Question : Routing/Firewall Issue
|
|
We work with a partner who recently changed the way we access information. Previously we used Citrix web interface to access their server farm. We now use the local Citrix client, they also changed an IP address. This is NOT a citrix issue, I have verified that everyway from Sunday its a firewall issue.
We have an internal router a PIX and then an external router. From the external router i am able to telnet to the IP address over 1494 and it works. If I try from behind the firewall it doesnt.
I thought outbound connections dont have any restrictions from a PIX unless implicity put there? I dont have any specific rule for PORT 80 or 443 traffic. It seems that the problem would be when the traffic is trying to come back in.
Any ideas?
|
Answer : Routing/Firewall Issue
|
|
Hey snowsurfer. If you have available public ips on the ip block for that pix, try this. create a static to the client machine.
static (inside, outside) publicip 10.0.1.x netmask 255.255.255.255 0 0 clear xlate local 10.0.1.x
(where 10.0.1.x is the ip of the client)
Try it now
|
|
|