I have an internal network and an offsite network both protected by Juniper SSG5 firewalls. The way I'm connecting from my machine (on the internal network) to a server located at the offsite location is by RDP. I changed the RDP port number of each server at the offsite location and created corresponding VIP services under the untrust interface on the SSG5 at the offsite location. So on my machine (internal) I RDP to the IP address of the untrust interface of the offsite location with the port number and it takes me to a specific server. (I know I should be using VPN and am working on getting that setup, but I want to get this fixed first).
So we have about 8 servers and there has been no problem with this before. Here is where the problem comes in. I've added a new server to the offsite location (10.10.10.80). I need to be able to RDP into the new server from my machine (internal). So I changed the RDP port for the server and add another VIP service on the SSG5 to point to that specific port number. Once I do this it causes 3 other completely unrelated VIP services to report as "down" and those services are unavailable. The newly added VIP reports as "up" and I am able to RDP into the new server. The 3 services (RDP, FTP, HTTP) that report as "down" are all pointing to the same local IP address (10.10.10.2) which has nothing to do with the newly added server (10.10.10.80). Once I remove the newly created VIP service they go back to reporting as "up" and they 3 services are available again. Weird eh?
Another change that may be helpful to know is that I just upgraded from Juniper 5GT to the SSG5 firewalls but I kept the exact same configuration except applying the necessary changes needed to be made since it's a new firewall/ScreenOS (some commands were slightly different in the config file).
What could be causing this or whats a good way to find out what the problem is?
Let me know if you need more information for troubleshooting.