質問する質問する
 

回答済みOracle NET v2 S2S VPN through ISA 2006

  • 2009年11月13日 12:34GavinChambers9 ユーザーのメダルユーザーのメダルユーザーのメダルユーザーのメダルユーザーのメダル
     
    Hi,

    I hope somebody has come across this issue before, i'll try to keep it as breif as possible. We have a S2S VPN between and Juniper SSG and ISA 2006. The tunnel comes up fine and we are able to route between Enc-Domains no problems. We have a Oracle 10g DB server behind the ISA server which is monitored using SQLNet v2 over the VPN from behind the Juniper. Connecting to the DB is no problem on port 1521, we can see the connections passing through the ISA when telnetting on 1521 the policy is 'ANY tcp/udp' traffic, when telnetting the connection is made in the telnet session. However because of the way that SQLNetV2 (used in Oracle 8 onwards) handles connections in - apparently requesting the client to connect in on another port than 1521 I think that this is failing despite the ANY flag, see following link.

    http://www.orafaq.com/maillist/oracle-l/2000/07/21/0173.htm

    Now from experience Juniper and Checkpoint firewalls have a specified SQLNetv1 and V2 service profiles that must in some way allow for this type of connection. Can anyone tell me if ISA has allowed for this and if not can this custom service be created. Has anyone else experienced and overcome this problem?

    Thank You.

回答

すべての返信