Ping returns for servers when connected to VPN on PIX 506e

Posted on 2005-04-25
Last Modified: 2013-11-16
I've got a person on the road who was having problems connecting to our internal systems through our VPN and it turned out the reason why is because the servers were saying their IP address was  I tried pinging a couple of servers behind our firewall when connected to the VPN and they all return the same IP of  Pinging the servers actual IP address works just fine so it's some kind of DNS issue I think.

This remote user was connecting through a hotel's wireless connection so I don't know what AP they use or what config they have but is there anything I can do on my end possibly in the PIX config to make sure these remote users can connect okay?  I had to resort to modifying the remote user's HOSTS file to let them in successfully and I'd like to avoid doing that if possible.

Question by:promap
    LVL 79

    Accepted Solution

    Many hotels use their own systems to "spoof" dns, supposedly to make it easier on the travellers.
    Make sure you have the correct DNS servers listed in the vpn client configuration..I travel a lot myself and have run into this more than once, but I already have my own hosts file anyway...

    I'll be happy to look at your PIX config if you want to post it..
    LVL 79

    Expert Comment

    Are you still working on this?
    Have you found a solution?
    Do you need more information?

    This question will be classified as abandoned soon if we don't get some feedback from you.

    Can you close out this question? See here for details:

    Thanks for your attention!

    Featured Post

    What Security Threats Are You Missing?

    Enhance your security with threat intelligence from the web. Get trending threat insights on hackers, exploits, and suspicious IP addresses delivered to your inbox with our free Cyber Daily.

    Join & Write a Comment

    Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
    The DROP (Spamhaus Don't Route Or Peer List) is a small list of IP address ranges that have been stolen or hijacked from their rightful owners. The DROP list is not a DNS based list.  It is designed to be downloaded as a file, with primary intention…
    This video discusses moving either the default database or any database to a new volume.
    Excel styles will make formatting consistent and let you apply and change formatting faster. In this tutorial, you'll learn how to use Excel's built-in styles, how to modify styles, and how to create your own. You'll also learn how to use your custo…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now