OpenVPN stoped working after symantec firewall installed on client

gonger · 03-20-2008, 05:55 PM

We have been using OpenVPN and it was working great. The clients were using MS windows default firewall. Now we are installing symantecs firewall on the clients and OpenVPN is no longer working. It is unable to existablish the connection and times out. The 2 computers icon never turns green.

What do I need to update in the client firewall? I am using port 1194.

Thanks

mdh · 03-20-2008, 06:01 PM

See if this helps:

http://service1.symantec.com/SUPPORT...nsf&view=docid

You didn't mention which version, whether you are an admin of the Symantec product and whether Untangle is "blessed" in your corporate environment. You may have policies & procedures to deal with, or just good old-fashioned technical bull&^$%. If this is too deep in the docs, back off one slash level and see if that gets you any closer.

gonger · 03-20-2008, 06:17 PM

We are trying to use symantec endpoint protection 11 with network access control enabled. Reading the symantec website, it looks like it does not support OpenVPN.

Thanks for your help.

mdh · 03-20-2008, 06:44 PM

I don't know if they have exclusions available here, but check this out:

http://service1.symantec.com/SUPPORT...07100512163348

Instead of the ports and protocols listed in this document, try UDP and port 1194. If it works, you owe me a Franziskaner. Silver Bullet gets a Coors too, because he's a nice guy!

Silver Bullet · 03-20-2008, 07:11 PM

Just don't make it a Frankenrottenhouser

I am going to see if I can find someone that sells that so I can try it.

gonger · 03-30-2008, 08:46 AM

I attempted to open port 1194 like you suggested and that did not work.

After talking to the symantec support guy, I learned that it is currently not supported and their next version due out in april has better vpn support.

So for now I turned off the firewall feature of endpoint protection and am using a different firewall on the clients.

I got openvpn backup up and running.

Thanks

abridge · 03-30-2008, 09:49 AM

I have installed Symantec Endpoint Protection at serveral sites and found it to be horrible product. It is not ready for the enterprise. It is bloated and requirements for the server with the management console are insane. I have downgraded many of our clients to 10.2 because of many problems Symantec cannot fix at this time.

Silver Bullet · 03-30-2008, 10:38 AM

I have deployed it for one customer because that is what sales sold them. While I didn't have any problems with it, I do not personally recommend Symantec products to anyone. If you do use the Symantec Endpoint Protection, don't push out the firewall part of the package as this seems to cause most people their headaches.

Ron Chandy · 03-30-2008, 10:20 PM

what about Norton 360.. does it also have an issue..relative to openVPN ..

choeschen · 03-31-2008, 10:16 AM

In my personal opinion I have found that the Norton suite of products is horrible. I had several support calls of extremely slow performance after Norton was installed. I also have found that for the most part Symantec AV is a good product. However as I try out the later version of this product I am seeing the performance of the PC drop. I am currently not recommending any Symantec product line and looking for another AV client.

03-20-2008, 05:55 PM	#1 (permalink)
gonger Untangler Join Date: Nov 2007 Posts: 33	OpenVPN stoped working after symantec firewall installed on client We have been using OpenVPN and it was working great. The clients were using MS windows default firewall. Now we are installing symantecs firewall on the clients and OpenVPN is no longer working. It is unable to existablish the connection and times out. The 2 computers icon never turns green. What do I need to update in the client firewall? I am using port 1194. Thanks

03-30-2008, 10:20 PM	#9 (permalink)
Ron Chandy Master Untangler Join Date: Feb 2008 Posts: 134	what about Norton 360.. does it also have an issue..relative to openVPN .. __________________ I believe in Angels...

03-20-2008, 06:01 PM	#2 (permalink)
mdh Join Date: Aug 2007 URLs submitted: 171 Posts: 4,802	See if this helps: http://service1.symantec.com/SUPPORT...nsf&view=docid You didn't mention which version, whether you are an admin of the Symantec product and whether Untangle is "blessed" in your corporate environment. You may have policies & procedures to deal with, or just good old-fashioned technical bull&^$%. If this is too deep in the docs, back off one slash level and see if that gets you any closer.

03-20-2008, 06:17 PM	#3 (permalink)
gonger Untangler Join Date: Nov 2007 Posts: 33	We are trying to use symantec endpoint protection 11 with network access control enabled. Reading the symantec website, it looks like it does not support OpenVPN. Thanks for your help.

03-20-2008, 06:44 PM	#4 (permalink)
mdh Join Date: Aug 2007 URLs submitted: 171 Posts: 4,802	I don't know if they have exclusions available here, but check this out: http://service1.symantec.com/SUPPORT...07100512163348 Instead of the ports and protocols listed in this document, try UDP and port 1194. If it works, you owe me a Franziskaner. Silver Bullet gets a Coors too, because he's a nice guy!

03-20-2008, 07:11 PM	#5 (permalink)
Silver Bullet Join Date: Sep 2007 URLs submitted: 3 Posts: 2,008	Just don't make it a Frankenrottenhouser I am going to see if I can find someone that sells that so I can try it.

03-30-2008, 08:46 AM	#6 (permalink)
gonger Untangler Join Date: Nov 2007 Posts: 33	I attempted to open port 1194 like you suggested and that did not work. After talking to the symantec support guy, I learned that it is currently not supported and their next version due out in april has better vpn support. So for now I turned off the firewall feature of endpoint protection and am using a different firewall on the clients. I got openvpn backup up and running. Thanks

03-30-2008, 09:49 AM	#7 (permalink)
abridge Untangler Join Date: Jan 2008 URLs submitted: 5 Posts: 59	I have installed Symantec Endpoint Protection at serveral sites and found it to be horrible product. It is not ready for the enterprise. It is bloated and requirements for the server with the management console are insane. I have downgraded many of our clients to 10.2 because of many problems Symantec cannot fix at this time.

03-30-2008, 10:38 AM	#8 (permalink)
Silver Bullet Join Date: Sep 2007 URLs submitted: 3 Posts: 2,008	I have deployed it for one customer because that is what sales sold them. While I didn't have any problems with it, I do not personally recommend Symantec products to anyone. If you do use the Symantec Endpoint Protection, don't push out the firewall part of the package as this seems to cause most people their headaches.

03-31-2008, 10:16 AM	#10 (permalink)
choeschen Master Untangler Join Date: Sep 2007 Posts: 123	In my personal opinion I have found that the Norton suite of products is horrible. I had several support calls of extremely slow performance after Norton was installed. I also have found that for the most part Symantec AV is a good product. However as I try out the later version of this product I am seeing the performance of the PC drop. I am currently not recommending any Symantec product line and looking for another AV client.