Still celebrating National IT Professionals Day with 3 months of free Premium Membership. Use Code ITDAY17

x
?
Solved

cisco anyconnect vpn user cannot connect to windows 7 virtual machine[s]

Posted on 2013-05-14
4
Medium Priority
?
1,767 Views
Last Modified: 2013-05-20
hi everyone, strange issue, we have Cisco VPN anyconnect users unable to RDP to some windows 7 PC's that are virtual on a hyper-v host. They can connect to VPN and RDP to virtual servers but for some reason the windows 7 guests give the "unavailable" message. We CAN VPN in and RDP to a virtual server, once inside, we can RDP to the win 7 guests. Physical win 7 machines are working also. Weird one. thanks in advance.
0
Comment
Question by:WAMSINC
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
4 Comments
 
LVL 57

Assisted Solution

by:Pete Long
Pete Long earned 1000 total points
ID: 39167634
Odd? Can you add the AnyConnect IP range to the allowed RDP (EVEN If THE FIREWALLS Are OFF!) See

Cannot RDP to machines via VPN or from other sites
Pete
0
 
LVL 28

Assisted Solution

by:asavener
asavener earned 1000 total points
ID: 39167955
Are the Win 7 virtual machines on a different subnet from the hosts?
0
 

Accepted Solution

by:
WAMSINC earned 0 total points
ID: 39168932
ok so we had to open a TAC on this. What they did was run wireshark on a dual nic machine after setting up a port span to mirror traffic. We could see ping packets getting there but not rdp through the VPN. On the firewall they could see from a capture that the packets were sending rdp and ping to the inside, which looked ok so RDP traffic was getting dropped somewhere after that...  We have a barracuda webfilter 410 in line, between our core switch and the firewall. Removing the cuda allowed RDP traffic to get to its destination. SO turns out the cuda had an application policy blocking RDP by default for "unauthenticated policy" which was getting applied because the VPN users are using a AAA local user database to connect to VPN, not LDAP and the cuda sees them as unauthenticated. So out of the box the cuda blocks RDP and a ton of other ports/apps too. The ridiculous part is that it was working intermittently so who knows what else its not doing the way its supposed to. Anyone reading this in the future should check that out if it applies. Case closed thanks for everyone's help.
0
 

Author Closing Comment

by:WAMSINC
ID: 39180452
had to open a TAC see details
0

Featured Post

Introducing the WatchGuard 420 Access Point

WatchGuard's newest access point includes an 802.11ac Wave 2 chipset, providing the fastest speeds for VoIP, video and music streaming, and large data file transfers. Additionally, enjoy the benefits of strong security as the 3rd radio delivers dedicated WIPS protection!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Let’s face it: one of the reasons your organization chose a SaaS solution (whether Microsoft Dynamics 365, Netsuite or SAP) is that it is subscription-based. The upkeep is done. Or so you think.
This article explains the fundamentals of industrial networking which ultimately is the backbone network which is providing communications for process devices like robots and other not so interesting stuff.
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…
Both in life and business – not all partnerships are created equal. Spend 30 short minutes with us to learn:   • Key questions to ask when considering a partnership to accelerate your business into the cloud • Pitfalls and mistakes other partners…

721 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question