Connection problems with Port 25 over a Point to Point VPN Connection

I have a basic network\wan\VPN setup.  An Exchange 2010 server is in our main office.  All remote offices are connected to the main office via a VPN.  Cisco ASA's are used at all locations.  
What we are wanting to do is setup the Scan to Email feature on our LaserJet MFP M525s.  I configure IP and SMTP settings on the LaserJet at a remote office and can ping the email server and vise versa.  But the SMTP settings fail the tests.  I try to telnet to port 25 on the Exchange server and it times out and fails.  I have the same LaserJet at our main office and configure it the same way it works just fine.  I can telnet to port 25 on the exchange server at our main office.  
I'm assuming that this is why SMTP settings fail on the MFP's at the remote sites.  I have checked firewall rules and about everything else I can think of.  I'm hoping someone here has some ideas.  Let me know if more info is needed and I'll get it to you.  

Thanks!
ryanthompsonAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mds-cosCommented:
There is nothing inherent to the VPN connection that would interfere with SMTP IP traffic to port 25.  You are definitely on the right track though by doing the telnet test.  Your assumption is correct -- if you cannot establish a connection to port 25 your SMTP setup on the printer will fail.

Does all other traffic across the VPN work?  Can you post your rule set and VPN configs (purged, of course, from IP and username/pw/other secure info)?
0
ryanthompsonAuthor Commented:
All other traffic works.  I can telnet to port 80 and 443 on the email server.  It's just port 25 that is giving me fits.  I'm working on getting the configs.
0
Simon Butler (Sembee)ConsultantCommented:
That will be the modern equivilent of fixup SMTP. It even causes problems with SMTP traffic.
http://semb.ee/fixupsmtp

You need to get it disabled on the Cisco devices.

Simon.
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

ryanthompsonAuthor Commented:
Simon - I stumbled across an article drescribing that.  I disabled it.  ESMTP doesn't show in the "inspect" list in my config.
0
Simon Butler (Sembee)ConsultantCommented:
You can soon check.
Telnet from the remote site to your Exchange server on port 25. Issue an ehlo command. If anything has xxxx on it, then it is still being blocked.

Simon.
0
ryanthompsonAuthor Commented:
I can't telnet to port 25 on the Exchange server from a remote site.
0
Simon Butler (Sembee)ConsultantCommented:
That means something is blocking the traffic.
AV, antispam are the usual targets, but I would still point the finger at the Cisco devices. I used to run a Cisco VPN myself and dumped it because it because it was too complex to manage.

Simon.
0
ryanthompsonAuthor Commented:
Simon - I agree.  I've disable the AV software and the windows firewall.  I think it's the Cisco devices.  I just can't figure out why and it's getting frustrating.

Thanks!
0
Simon Butler (Sembee)ConsultantCommented:
Do you have smartnet on them? If so, call Cisco and ask.

Simon.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Exchange

From novice to tech pro — start learning today.