all sites don't show

[ian0583]

When i install puresight for wingate, the other computers in the network can no longer access the internet. why is that so?

[MattP]

Hi,

Are the network clients getting a PureSight error when they try to connect to the internet?

What filter percentage have you got PureSight set to? If it is set very low then it is possible that all pages are being blocked.

How are the clients connecting, NAT, proxy or WGIC?

[ian0583]

there is no puresight messages on the network...it is just that the browser displays that the site cannot be reached or a time out on connecting on any site. the puresight filter is set to 60% and then i tried to disable the filter but still the network cannot access the internet. only the PC with the wingate and puresight can access the internet.

[ian0583]

clients are connecting via NAT

[ian0583]

clients are connecting via NAT

[MattP]

If you remove PureSight as a plug-in option from the WWW proxy service are the clients able to browse? You can do this by going to the plug-ins menu in the WWW proxy and unchecking PureSight.

Can you also try turning off Transparent Redirection so that the NAT connection goes straight out, can they browse now?

This doesn't sound like a PureSight problem, it sounds more like a DNS problem. How is your DNS configured?

[ian0583]

If you remove PureSight as a plug-in option from the WWW proxy service are the clients able to browse? You can do this by going to the plug-ins menu in the WWW proxy and unchecking PureSight.

Can you also try turning off Transparent Redirection so that the NAT connection goes straight out, can they browse now?

This doesn't sound like a PureSight problem, it sounds more like a DNS problem. How is your DNS configured?

i tried to remove the plug-in in the WWW proxy service, but still it does not work. how do i turn off transparent redirection?

what do you mean by DNS configuration?

[MattP]

You can turn on Transparent Redirection in the Sessions menu in the WWW proxy, just uncheck Transparent Proxy and remove the checkbox from the port that you're listening on. You should now see the client connections as NAT connections.

By DNS configuration I mean can you describe how your DNS is set up on your LAN.

Do you have a DNS server configured on the LAN adapter of the WinGate server, if so are you running Active Directory. If you're not then you probably shouldn't have a DNS server listed in this adapter.

Do the clients point to the LAN adapter of the WinGate server for their DNS server? If not, where do they get their DNS from?

[ian0583]

the set-up of the network is that all the cllients are connected into a router and the router connects to a PC connected to the internet with the wingate...
the DNS server is the router.

[MattP]

Were the network clients making a NAT connection before you installed PureSight?

Installing PureSight would have turned on Transparent proxy, so a NAT connection would then get forced through the proxy. If the WinGate server is not set up correctly then it would not be able to resolve the web request. How is the DNS set on the WinGate server? Does the Network adapter that connects to the LAN router have a DNS server specified? If it does please remove this setting.

Does the internet adapter have a DNS server listed? You should have the ISP's DNS servers set in this adapter.

Do you have any servers listed in the WinGate DNS resolver?

[ian0583]

the clients were able to access the internet using NAT connections before puresight was installed. please elaborate what you mean. because this is my first time to deal with wingate and such kind of network. i'm only used to a home network. there was not much of a turn-over of responsibilities in this office and i really don't know how to configure these networks...

so if the transparent proxy would not be installed with puresight...would it be ok?

[jamesc]

What version of WinGate do you have installed?
What version of Pure Sight?

so if the transparent proxy would not be installed with PureSight...would it be ok?

It would be ok if the users were browsing directly through the proxy. e.g. they have the proxy set in Internet Explorer. If they do not have the proxy set in internet explorer, then that is when you require to have the "Transparent Proxy", so that connections to websites get "Intercepted" by WinGate and pumped through the proxy, so PureSight can filter out any undesirable content.

[ian0583]

wingate version 5
puresight 1.1

[jamesc]

Can you please do this DNS test from a client computer? When the PureSight plugin is activated, if you cannot access http://www.google.com but can access http://66.102.7.99 , then you have a DNS problem.

If that is the case, please post an ipconfig/all in the forum.
(windows) Start menu --> Run --> cmd --> ipconfig /all >> C:\ipa.txt
The results of the command will be found in your C:\ in a file called ipa.txt.

[ian0583]

here is the ipconfig /all:

Windows 2000 IP Configuration



Host Name . . . . . . . . . . . . : ps10
Primary DNS Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Broadcast

IP Routing Enabled. . . . . . . . : No

WINS Proxy Enabled. . . . . . . . : No


Ethernet adapter Local Area Connection:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : VIA Rhine II Fast Ethernet Adapter
Physical Address. . . . . . . . . : 00-0D-87-AA-3C-1E

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 192.168.2.10

Subnet Mask . . . . . . . . . . . : 255.255.255.0

Default Gateway . . . . . . . . . : 192.168.1.1

DNS Servers . . . . . . . . . . . :

PPP adapter Speedtouch Connection:



Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface

Physical Address. . . . . . . . . : 00-53-45-00-00-00

DHCP Enabled. . . . . . . . . . . : No

IP Address. . . . . . . . . . . . : 203.xx.179.16

Subnet Mask . . . . . . . . . . . : 255.255.255.255

Default Gateway . . . . . . . . . : 203.xx.179.16

DNS Servers . . . . . . . . . . . : 202.52.162.40
203.xx.3.100
NetBIOS over Tcpip. . . . . . . . : Disabled

what should i do?

[jamesc]

1. So how did the google test go?

Also, with your configuration of your network card with the IP Address 192.168.2.10, you have a default gateway set as 192.168.1.1. That looks like the error. Usually a computer only has one gateway; and that is the one assigned to your internet adapter / network card pointing towards the internet.
2. What device has that address?

3. Can you please remove the Gateway and test.

[ian0583]

1. So how did the google test go?

Also, with your configuration of your network card with the IP Address 192.168.2.10, you have a default gateway set as 192.168.1.1. That looks like the error. Usually a computer only has one gateway; and that is the one assigned to your internet adapter / network card pointing towards the internet.
2. What device has that address?

3. Can you please remove the Gateway and test.

about the google test...both were addresses were not reached. the device for the 192.168.2.10 is the LAN card of the computer that is connected to the internet. 192.168.1.1 is the IP address of the router connecting to the private network.

[ian0583]

when i activate the transparent redirection in the WWW proxy of wingate, the network clients still cannot access. but with transparent redirection is inactive, they can access the internet.

[jamesc]

the device for the 192.168.2.10 is the LAN card of the computer that is connected to the internet. 192.168.1.1 is the IP address of the router connecting to the private network.

1. OK. So 192.168.2.10 is the internal LAN card of the WinGate Server; correct.
2. The only internet connection on your network is on the WinGate server; the router does not connect to the internet, correct?
3. What is the IP address on each side of the router?
4. Frowm what you have described about your network, this is what I am interpreting.

Client Machines --> Router ( or is it a switch???) --> WinGate Server --> Internet via Speedtouch modem

If that is incorrect, please clarify your network setup. Can you also give me a sample of a clients IPCONFIG/all, or just type in the info below:

IP Address
Subnet
Gateway
DNS

[jamesc]

when i activate the transparent redirection in the WWW proxy of wingate, the network clients still cannot access. but with transparent redirection is inactive, they can access the internet.

So when you have transparent redirection on, the google test will not work, correct? Because if you can NAT successfully, but not use the proxy, that points to a DNS or TCP/IP issue.

[ian0583]

the device for the 192.168.2.10 is the LAN card of the computer that is connected to the internet. 192.168.1.1 is the IP address of the router connecting to the private network.

1. OK. So 192.168.2.10 is the internal LAN card of the WinGate Server; correct.
2. The only internet connection on your network is on the WinGate server; the router does not connect to the internet, correct?
3. What is the IP address on each side of the router?
4. Frowm what you have described about your network, this is what I am interpreting.

Client Machines --> Router ( or is it a switch???) --> WinGate Server --> Internet via Speedtouch modem

If that is incorrect, please clarify your network setup. Can you also give me a sample of a clients IPCONFIG/all, or just type in the info below:

IP Address
Subnet
Gateway
DNS

the ip address of the router on each side is this:
clients -> 192.168.1.1
wingate server -> 192.168.2.1

clients ip address : 192.168.1.xxx
subnet : 255.255.255.0
gateway : 192.168.1.1
DNS : 192.168.1.1

[ian0583]

4. Frowm what you have described about your network, this is what I am interpreting.

Client Machines --> Router ( or is it a switch???) --> WinGate Server --> Internet via Speedtouch modem

this is correct.

[jamesc]

Can you please try and remove the Gateway from WinGates internal network card?

[ian0583]

i already did but still the same outcome...

[jamesc]

1. Are you able to use the Transparent proxy without the PureSight plugin activated?
2. Can you please show the result of a route print command. (Windows) Start menu --> Run --> cmd --> route print
Please mask any Public IP address with an XX in one of the Octets.

[ian0583]

how do i use transparent proxy without the plugin? what do i do ifi can't?
on which unit shoud i use the route print command? on the wingate server o on the client?

[jamesc]

how do i use transparent proxy without the plugin? what do i do ifi can't?

Just deactivate the PureSight plugin (Please note in the pic blow, I only have the KAV plugin shown; the concept is still the same though, clear the check box.).



Make sure Transparent Proxy is on, and test.

on which unit shoud i use the route print command? on the wingate server o on the client?

Get the route print from the server.

[ian0583]

from the looks of it, your version of wingate is 6.x i am using version 5 there is no "add" button only the checkbox saying "Redirect ENC and WGIC sessions". i checked it but the clients still cannot connect...what does that mean?

[jamesc]

That should be ok. It means that it is not isolated to the PureSight plugin, it is the WWW Proxy service.

When you have that setup, can ya still get to googles IP address? http://66.102.7.104/

[ian0583]

clients could not connect...so what does that mean?