ASA - DMZ SEGMENT - LOTUS NOTES ACCESS

[netkrish80]

Hi,

I have hosted lotus notes server and citrix servers in the dmz segment of the asa. Remote access vpn has been configured. Users is using vpn to access the servers. Users are not facing any problem when they try to access citrix and others servers after login to vpn.

But when they try to access lotus notes server using lotus notes client after authentication they are not able to view their mail box. When they try to telnet to port 1352 it is sucessful. when they ping to server its works fine. But not able to view mails. it is saying server not responding.

I have updated the host entry also in the host files of the client pc. But users having windows 98 operating system is able to view mails. But not in windows xp.

Please let me know what can be done in asa.

When we replaced asa with pix it works fine. But servers are not hosted in dmz segment in pix.

Regards

KRishna.

[ebreniz]

I would suggest you to look at the ASA configuration that allows the traffic from outside to inside. Make sure you have the necessay NAT and global commands to allow traffic from inside to outside also. Also check if you have necessary ACLs to permit the required traffic.

[sachinraja · Accepted solution]

Krishna,

please check the DNS/domain suffix. We had similar problems and it got resolved after adding the DNS suffix on the general attributes for the VPN client group.

Regards

Raj

[netkrish80]

Hi,

thanks for the info. it worked.

krishna.