VPN Client and MS. Outlook

[lopezegen5]

Hi--I've configured EZVPN, client connect with VPN client 4.01, We can access exchange using Outlook Web Access but we cannot using Microsoft Outlook.

need assistance.

Tks

[globalnettech]

Hello,

I assume you have EZVPN configured on a router ? Try and use the command:

ip tcp adjust-mss 1350

on your LAN (Fast)Ethernet interfaces, and see if that makes a difference. If not, can you post the config of your router ?

Regards,

GNT

[lopezegen5]

Hi-- Find attached the config.

Note when I remove access-list 101 deny tcp any any eq 135, I can access find. Is there a way to make it work without removing the tcp eq 135?

Thanks

[Vikas Saxena]

tcp 135 is netbios (WINS).

From the VPN client can you ping by hostname?

Do you have a WINS server?

Can you try your outlook with ip address of the exchng server?

Look at this kb from MS

http://support.microsoft.com/kb/q150543/

It tells you all the ports used by NT, WIN2Kx

-Vikas

[lopezegen5]

Hi Vicas, I can ping the hostname.

When I open the TCP port 135, Ms outlook works fine. The problem is that I can permit TCP 135.

One of the options will be to allow outlook client to connect through a different port to the exchange.

I was wondering if there was no other option.

Thanks

[Vikas Saxena]

Hello,

How have you configured the exchange server in outlook is a hostname like 'example' or 'example.com'.

If you have a domain name 'example.com' you should have a DNS resolver configured. and you should be pinging 'example.com' rather example.

If you have a DNS you should not face any problems.

Vikas

[lopezegen5]

Hi Viskas,

Thanks, we have a DNS server which is resolving perfectly; I don't have any issue about name resolution (100%) fine.

The issue is that outlook needs to use the TCP port 135 to initiate the communication with the exchange server. That is the reason why when we allow TCP on port 135 we don't have the problem. But port 135 is use for DoS. So I’m looking for another option that will not expose us to DoS.

Thanks