VSphere Client "Loading Inventory"

[Macross]

Ive recently deployed untangle in bridged mode between my LAN and firewall. Untangle isnt providing any routing or firewall capabilities, and is pureley doing web filtering, with virus, spyware, phish, application, intrusion and ad blocking. So far working very well with one small issue.

I have an secure private network tail back to a data centre where my co-lo servers are. When i try to use vmware vshpere client to connect to data centre esxi servers, the client connects and then hangs at loading inventory. If i take untanlge off the network, i can connect fine. Untangle physicly bridges between my LAN and my firewall and the SPN network is an optional interface on my firewall.

LAN -> Untangle -> Firewall -> SPN

My lan gateway is x.x.x.254. untangle in bridged mode is x.x.x.253. When i tracert to spn servers the first hop is x.x.x.253 . So i am not sure if untangle is blocking something in vsphere client or if its the extra hop that may be causing the problem?

Any help would be greatly appreciated.

thanx.

[sky-knight]

Make a bypass rule for stuff destined for your SPN ip range. Untangle bridges aren't "layer 2" once the packets hit the UVM. The packets are destroyed, processed, and reconstituted based on layer 3 configuration, and some stuff just flat doesn't like it.

You shouldn't be scanning stuff heading to a trusted network anyway!

[Macross]

Thanks for you quick reply. I dont have the firewall 'app' installed and i dont see anywhere else to create a bypass rule.

I just ran a test and dissabled all the 'apps' running on untangle and get the same result.

[jcoffin]

Bypass rules are in
Config -> Networking -> Advanced -> Bypass