This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

File Sharing Through Remote Access

I have a UTM 9 FW 9.5

I have Remote Users log in through VPN Client (VPN-SSL) The VPN Pool is 10.242.2.0/24

the internal network is 192.168.4.X/24

I have a PC in my internal network that is configured for file sharing. (windows 7 Machine)

Users who log in through the VPN client, can ping the PC, and can access the PC using Remote Desktop, but they do not have access to file shares.

How do I setup the UTM 9 to allow remote users to access the file shares without having to use remote desktop?

I have been trying to set this up for the past 2 days with out any results.

Thanks

George

This thread was automatically locked due to age.

Parents

0 Karlos over 6 years ago

Hi George,

Could you provide a snip of your configured VPN->LAN firewall rule?

Thanks,
Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to Karlos
Cancel
Vote Up 0 Vote Down

Cancel
0 Karlos over 6 years ago in reply to GeorgeGuel

I'm not sure which rule is your VPN->LAN rule, could you open the specific rule so I can review the source/destination networks and services allowed.

Thanks,

Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to Karlos

I don't know if I have a firewall rule from my VPN to my LAN.

Just a Routing Rule

George
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to GeorgeGuel

I just added this Rule
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to GeorgeGuel

I still cannot get to any of the shared folders on the PC.

I don't know what I am missing.
Cancel
Vote Up 0 Vote Down

Cancel
0 Karlos over 6 years ago in reply to GeorgeGuel

Control Network is your Internal Network (192.168.4.X/24)?

Could you run a packet capture from an IP in your VPN pool to the file share PC and provide the output? Run another packet capture as your RDP into the PC, as comparison.

Thanks,
Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to Karlos

I can't log in to the Shell loginuser acct. Password is not working even if I change the password. in Shell Access
Cancel
Vote Up 0 Vote Down

Cancel
0 Karlos over 6 years ago in reply to GeorgeGuel

Could you make sure you've followed this KB article when changing the password for your shell.

As in the article, change Allowed Networks to Any temporarily as you test.

Thanks,
Karlos

Karlos
Community Support Engineer | Sophos Technical Support
Knowledge Base | @SophosSupport | Sign up for SMS Alerts
If a post solves your question use the 'This helped me' link.
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to Karlos

yes, I change the passwords In the shell

when I try to log in using login user I get the following

login as: loginuser

Using Keyboard-interactive authentication.

Password

Access denied

Using keyboard-interactive authentication

George
Cancel
Vote Up 0 Vote Down

Cancel
0 GeorgeGuel over 6 years ago in reply to GeorgeGuel

OK I was able to finally login to the command line

what is the command to perform the packet capture?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 6 years ago in reply to GeorgeGuel

If 192.168.4.0/24 is on eth0 and your PC is 192.168.4.101,

tcpdump -n -I eth0 dst 12.18.4.101

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 BAlfson over 6 years ago in reply to GeorgeGuel

If 192.168.4.0/24 is on eth0 and your PC is 192.168.4.101,

tcpdump -n -I eth0 dst 12.18.4.101

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data