Inability to Browse to Website
If you cannot browse to a website, work through the following steps to troubleshoot the issue:
Step 1. Try to access the website directly (locally) without going through the SSL VPN connection.
Step 2. Be sure DNS Server is configured and functioning correctly on the VPN 3000 Concentrator by pinging to the website using the domain name from the Administration > Ping page. If you do not get a DNS response, check to be sure that the DNS server is defined correctly, by going to the following page: Configuration > System > Servers > DNS. Be sure that the DNS server IP address is defined correctly and Enabled is checked.
Step 3. Check to see if the Proxy server configuration is needed for website access. If so, from the VPN GUI, go to Configuration > Tunneling and Security > WebVPN > HTTP/HTTPS Proxy and define the proxy server.
Step 4. Go to Configuration > System > Events > Classes > Add and set the severities of WEBVPN Event Class to 1-8, which will display basic connectivity. Use the WEBVPN Logging tool or Sniffer trace to track down the failure.
Website Displays Incorrectly
Work through the following steps to troubleshoot issues with website displays:
Step 1. Try to access the website directly (locally) without going through the SSL VPN connection.
Step 2. Clear the browser's cache and retry with a new window.
Step 3. Be sure that there are no pop-up blockers enabled for the browser. Pop-up blockers can cause a page to be blocked, resulting in a blank page.
Step 4. Establish another WebVPN session using a different type of browser (for example, if Internet Explorer is not working, then try Mozilla or Netscape), and try accessing the website again.
Step 5. Verify proxy settings/requirements on the browser.
Step 6. Refer to the current VPN 3000 Concentrator version release notes, or the new version release notes, and check for any possible bug.
Step 7. If no known bug found is found, then enable WEBVPN logging and start the log right before the failed display with the procedure shown in the section entitled "Turning on WEBVPN Event Class For Logging."
Configuration Steps for CIFS Access
With SSL VPN, you can allow shared drives and folders to be navigated through a WebVPN session. Sharing and authentication rules defined on the server will be enforced. Work through the following steps to configure CIFS access on the VPN 3000 Concentrator:
Step 1. Complete the configuration steps explained in the section entitled "Configuration Steps for Basic SSL VPN Connection."
Step 2. On the VPN 3000 Concentrator GUI, go to the Configuration > System > Servers > NBNS page and define a WINS Server IP address, and turn it on by checking Enabled.
Step 3. Configure access to URLs in the Configuration > Tunneling and Security > WebVPN > Servers and URLs screen. To add a new URL for the file server, click on Add. In the Add page, specify the Name as it should appear on the Web VPN portal page, the server type (CIFS Server), and the actual File Server location.
Troubleshooting Steps for CIFS Access
Work through the following steps if you cannot browse to a file share:
Step 1. Check to see if you can locally access the CIFS without going through the SSL VPN.
Step 2. Verify the access method. Check to see if it is a configured server or if it is the user entering the server name or trying to browse the network.
Step 3. Verify that the access method desired is allowed from the group the user is mapped to.
Step 4. Make sure an NBNS server is defined and it is working. Go to Configuration > System > Servers > NBNS on VPN 3000 Concentrator GUI and be sure that the WINS server IP address is correct and that the Enabled box is checked.
Step 5. Verify that the resource you are trying to access is allowed.
Step 6. Keep in mind that when browsing to a non-shared service, you will still be prompted for a username and password. Hence, you need to determine if the failure is a login failure or access is not allowed for reading the file.