any connect on firewall no responding

Posted on 2014-08-10
Last Modified: 2014-08-11
i have configured the any connect on the firewall
configured a conection profile
linked with the group policy
created a local user link with connection profile and GP
enable any connect on the outside interface
i have domain  resolved into an ip address

when i put the ip address or
check the internet connectvitity
Please help its urgent as i need to provide solution to the client tomorrow
i have changed the port number where it should respond ex it was port 443 earlier but i have changed it to por 5533
still i get an error "connection attempt timed out , check internet connectivity.
Question by:mohannitin
    LVL 89

    Accepted Solution

    I do not use this - I use NCP Secure Entry. So I am not sure if I can help.

    1. Is this PPtP or IPsec?
    2. Please enable logging on the firewall and see what error you get in the log when you try to connect.
    3. Do you have the firewall on a different subnet than your client machine?
    LVL 3

    Assisted Solution

    Can you ping from the outside world to (or just internally) did you set up that entry on the DNS? Is the DNS connected to the outside? can you ping the ip address from the outside?
    LVL 89

    Expert Comment

    by:John Hurst
    I used to use Tweakmaster in days of XP and the tweaks did not do anything significant. TCP/IP has gotten better in newer operating systems. If you do make changes, make explicit notes so you can reverse them, and of course, TCP/IP resets any tweaks.

    Author Comment

    ok, thanks guys.checked the outside interface there are many request going on port 443
    and port 443 is used by OWA
    therefore i have configured the firewall to respond on port 5553 and DTLS port 5554
    it has stated responding now.

    Author Closing Comment

    thanks guys you have given me a clue , where to look for the errors
    i have debug the outside interface and looked which port the packets hitting the firewall.
    it seems to be resolved now.
    Creating a SSL certificate for the outside ip now. :)
    LVL 89

    Expert Comment

    by:John Hurst
    @mohannitin  - Thanks for the update and I was happy to help.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    What Is Threat Intelligence?

    Threat intelligence is often discussed, but rarely understood. Starting with a precise definition, along with clear business goals, is essential.

    Suggested Solutions

    Most people are under the false impression that installing an antivirus package, antispyware package, OS updates/security patches, and firewall are all you need to secure your network resources. Those methods are a good start, but leaves your networ…
    This paper addresses the security of Sennheiser DECT Contact Center and Office (CC&O) headsets. It describes the DECT security chain comprised of “Pairing”, “Per Call Authentication” and “Encryption”, which are all part of the standard DECT protocol.
    Hi everyone! This is Experts Exchange customer support.  This quick video will show you how to change your primary email address.  If you have any questions, then please Write a Comment below!
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now