unable to access shared drives

[manum]

Hello,

I'm facing an issue with windows10 endpoints that can not join shared drives on windows server 2012 servers over a pulse secure VPN connection.

It works correctly when the customer is on his internal LAN.
Does someone already have this kind of issue?

I do not understand what the VPN can breaks about this kind of access.

Regards.

[lynchnigel]

Explain a bit more as to what you are referring to ? can it be a DNS issue where they need to specify or you need to specify the FQDN ?

[manum]

Hello,

I'm able to perform DNS requests to the server.
Ping is working with IP or FQDN.

But access to file share is not working neither with IP nor with FQDN.

Regards.

[zanyterp]

Which type of Pulse connection: L3 or L4?
Does your ACL allow access?
If you are using an L3 connection, does the file server have a route back to the VPN IP?

[lynchnigel]

Has it ever worked?
Have you changed anything?

[manum]

Hello All,

We are using a L3 connection (SSL VPN). There are no ACL in the policies, all the traffic is routed through the VPN. The routing is ok as I'm able to reach all intranet resources. Only file sharing is not working.

It works correctly for windows 7 endpoints through the VPN. So I suspect something is going wrong with the VPN on windows10 endpoints as it is working correctly without the VPN.

I know that file share has changed since Windows10 but can not figure out why it is not working through the VPN.

Regards.

[zanyterp]

I am not sure; I have tested this and it works successfully in my testing
What does your TCP dump show?

[manum]

Hello,

My tcpdump shows kerberos exchanges (over tcp 445 port) between client and server.

Then a SMB access Request, access response sent by the server and connection reset by the server immediatly after the SMB response.

Regards.