VPN 3000 Client, SecureACS, and PIX 515

[berkam]

The 515 is configured to hand out IP addresses from a pool. When a remote user authenticates to the PIX (through NT domain authentication via the ACS), they get an address. Machines on the local network can ping this address, but the remote machine cannot see any internal machines at all. What could be wrong?

[beth-martin]

When you say “the remote machine cannot see any internal machines at all” do you mean it can’t see the network shares? Can it even ping these hosts? If you can ping but not browse the network, you are probably not using a WINS server, which will be required for NETBIOS name resolution. If you are using WINS, describe in detail what you have tried.