Accessing Resources Behind Firewall via VPN [message #145960] |
Thu, 13 June 2019 23:03  |
mburchard
Messages: 6 Registered: February 2016
|
|
|
|
Hi, small office here with Kerio Control on a NG300, we have a few small servers here, one of them an Intel NUC with Windows 10 on it with a shared database. No worries for users connecting to that when they are in the office, and my thought was that I was going to have users connect to the local network with the Kerio Control VPN Client to access the database remotely, so said database can sit safely behind our firewall.
No problem to establish the VPN connection, but once connection is made users can't see the local network. More specifically, the local network 10.10.10.*, with the NG300 at 10.10.10.1 and doling out 10.10.10.X IP addresses to the local devices. I did not touch VPN settings, and when you come in via VPN you get an IP address of the form 10.189.153.*. My database is sitting on a NUC at 10.10.10.6 (fixed address), I can't browse to that via the Network option in Finder (OSX) or File Explorer (Windows 10), or ping it, but strangely I can mount the NUC desktop at 10.10.10.6 using Microsoft Remote Desktop.
Pretty sure one of the whole points of VPN tunnels is to access resources behind a firewall securely, so the solution to my problem is probably simple, but I am the IT department in our small shop and this is a little beyond me.
Thanks!
|
|
|
|
Re: Accessing Resources Behind Firewall via VPN [message #146177 is a reply to message #146148] |
Wed, 03 July 2019 14:38   |
mburchard
Messages: 6 Registered: February 2016
|
|
|
|
OK, so default for Service Discovery forwarding is disabled. Turned it on. Devices show up in OSX Finder when making remote VPN connection, but can't connect via the Finder, and my Windows users can print to printers in the office but computers on the network are not visible. With OSX I can connect to computers on the network using Microsoft Remote Desktop (but again, can't connect via Finder).
I wish there was more support for this product. I'd be happy to pay for it. Anyone?
|
|
|
|