Help Needed - SilverStream Application not working after Untangle 5.4.2 installation

[aaron_rscs]

I just installed an Untangle 5.4.2 box in bridge mode and, at first, everything appeared to be working.

Within a couple of minutes of "going live", a user reported to me that she could no longer use her SilverStream Java application. (See http://www.novell.com/documentation/extendas37/docs/helpcore/books/facSilverJEEClient.html for info on SilverStream...)

Long story short, SilverStream Java apps require the SilverJRunner client to be installed on the local machine. This client more or less just provides a connection to the SilverStream host server outside of the browser. The connection is launched via a shortcut on the user's desktop and is in the form: "installdirectory\bin\SilverJRunner.exe [options] [protocol://]hostname[:port] databasename formname [appargs]" in my specific case, the shortcut has the form:
"c:\SilverJRunner\bin\SilverJRunner.exe http://servername:80 DB form". The shortcut has worked as is for the user for two years. After I installed the Untangle server today, the shortcut stopped working. If I unplug the Untangle server, the shortcut works again as normal...so I know the Untangle box is stopping it...but I don't know why!

I looked at the admin console to see if I could catch anything in there (I have Virus Blocker/Intrusion Prevention/Protocol Control/Attack Blocker installed. Virus Blocker is scanning the app, but it scans clean. There is no entry in any of the other Rack Apps Event Logs that mention SilverJRunner.

Does anyone have any ideas on this? If I can't get this SilverStream app to work, I can't use Untangle on this network.

Aaron

[Silver Bullet]

Welcome to the forums!

what's the destination port that it make the connection on?

If it is some off the wall port then you could create a bypass rule that says something like:
Source: Users IP
Destination: Destination IP
Source port: Any
Destination Port: Port it uses

This would make all traffic from that client over that port to that destination bypass untangle and just be nat'd.

[aaron_rscs]

Thanks for the quick response. Did I put this post in the right place?

As far as I know the destination port is 80.

Interesting thing...not sure if this helps at all...

I've got a VPN client installed on the user's box who needs to run this SilverStream application. The VPN connects to the SilverStream server's host network to provide a more secure environment for the SilverStream app. She normally does not use the VPN connection, but since her app stopped working, I had her launch the VPN first before trying to run her app. That worked. She was able to use the app after she launced the VPN. Problem is, more than one person on the net needs to use this SilverStream app and it seems that the endpoint vpn server is only allowing one connection at a time from a given IP address. So...I need these users to be able to use this app without the VPN connection.

At this point, the untangle box only has its internal NIC connected to the network (IE...it is just another box). If I can't find a solution to this, then I will have to take the untangle box out of the network.

Aaron