Only 10 internet connections for a domain?

Posted on 2011-10-14
Last Modified: 2012-08-13
We have a Windows Standard Server 2003 AD domain with 14  client XP Professional computers. Each day we turn on the computers and find the last 4 computers we turn on  (we've tried turning them on in different orders, it doesn't make a difference) take 5 - 10 minutes "Applying computer settings" and then do not have the ability to view web pages. All clients are able to ping the AD & DNS server and are able to successfully ping external domain names via the command line. All 14 clients are able to run client/server applications and view the network. Is it possible that CALs are limiting the connection to the internet on 4 computers? I know we have 10 CALs (per server mode). Any ideas would be greatly appreciated.
Question by:GnDurango
    LVL 89

    Assisted Solution

    by:John Hurst
    It is best to have as many CALs as you do users, and in this case, I would add another 5 (1 pack).

    Do you have a firewall type router that limits you to 10 connections. I have seen that before at clients.

    .... Thinkpads_User
    LVL 10

    Expert Comment

    What firewall/router do you have? I would start looking there.
    Are you running a proxy server of any sort? (Licensed for 10 users perhaps?)

    Author Comment

    We do have a Cisco PIX 500 firewall in place. I was assured it does nothing more than create a secure tunnel for specific file transfers from another site. The other site will not allow access to the PIX configuration. I'm attempting to rule out everything else before jumping into that bureaucratic nightmare. I'm afraid that may be the cause however.
    LVL 95

    Expert Comment

    by:Lee W, MVP
    I would suggest you remove the firewall and go straight to the internet with a cheap router FOR TESTING ONLY.   Just to be 100% certain it's not some kind of router/firewall configuration issue because this sounds a LOT like a firewall/router limitation on some older models.
    LVL 36

    Accepted Solution

    If its a PIX 501, I would agree with Thorrsson and leew and guess that it is only licensed for 10 hosts.

    If you ask the people that manage it to do a "show ver" it will probably look like this

    Cisco PIX Firewall Version 6.3(5)145
    Cisco PIX Device Manager Version 3.0(4)
    Compiled on Thu 24-Jul-08 15:27 by root
    pixfirewall up 2 days 20 hours
    Hardware:   PIX-501, 16 MB RAM, CPU Am5x86 133 MHz
    Flash E28F640J3 @ 0x3000000, 8MB
    BIOS Flash E28F640J3 @ 0xfffd8000, 128KB
    0: ethernet0: address is 0012.80e6.f765, irq 9
    1: ethernet1: address is 0012.80e6.f767, irq 10
    Licensed Features:
    Failover:                    Disabled
    VPN-DES:                     Enabled
    VPN-3DES-AES:                Enabled
    Maximum Physical Interfaces: 2
    Maximum Interfaces:          2
    Cut-through Proxy:           Enabled
    Guards:                      Enabled
    URL-filtering:               Enabled
    Inside Hosts:                10
    Throughput:                  Unlimited
    IKE peers:                   10
    This PIX has a Restricted (R) license.
    Serial Number: <redacted>
    Running Activation Key: <redacted>
    Configuration last modified by enable_15 at 15:13:20.212 BST <redacted>

    Open in new window

    The key part is the "Inside Hosts:"

    Author Closing Comment

    Thanks everyone. It was definitely the PIX firewall's limitation. Replaced with a new firewall and all is well. Added 5 more CAL's as well, though that was not the issue.
    LVL 89

    Expert Comment

    by:John Hurst
    Thank you. I was happy to help and thank you for the followup. ... Thinkpads_User

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Can you find a fax from a vendor you saved a decade ago in seconds? Have you ever cursed your PC under your breath during an audit because you couldn’t find the requested statement or driver history?  If you answered no to the first question or yes …
    Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
    In this sixth video of the Xpdf series, we discuss and demonstrate the PDFtoPNG utility, which converts a multi-page PDF file to separate color, grayscale, or monochrome PNG files, creating one PNG file for each page in the PDF. It does this via a c…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now