GC 11G AND Network Address Translation

HI,
I have simple question , Is Network Address Translation supported with GC 11g. I know it is not on 9i.
thanks.

I can't find anything on this on the internet. So creating a SR is an option.
The only note I found was: Agent Fails to Upload Through Load Balancer, Secures Successfully [ID 1149610.1] suggesting you can use NAT.
Eric

Similar Messages

  • Tuxedo and Network Address Translation(NAT) at Firewall

    We made a sucessful connection through the firewall without Network Address Translation
    (NAT)on the firewall, from one network to the other and what we found happened
    was that the client machine makes a connection on port 8090 and then sets up a
    successful connection to the server (WSL).The client then very soon afterward
    makes another connection on
    another high-port and everything works (WSH connection).
    Whats not happening with NAT is that the second connection is not being made to
    the firewall. The firewall and the router are not blocking the call. It is just
    not being made.
    Thanking you in advance!!!
    Nathaniel

    Nathaniel,
    Take a look at the WSL -H option at
    http://edocs.bea.com/tuxedo/tux80/atmi/rf540.htm#1534543
    Regards,
    Peter.
    Got a Question? Ask BEA at http://askbea.bea.com
    The views expressed in this posting are solely those of the author, and BEA
    Systems, Inc. does not endorse any of these views.
    BEA Systems, Inc. is not responsible for the accuracy or completeness of
    the
    information provided
    and assumes no duty to correct, expand upon, delete or update any of the
    information contained in this posting.
    Nathaniel Sebolai wrote:
    We made a sucessful connection through the firewall without Network Address Translation
    (NAT)on the firewall, from one network to the other and what we found happened
    was that the client machine makes a connection on port 8090 and then sets up a
    successful connection to the server (WSL).The client then very soon afterward
    makes another connection on
    another high-port and everything works (WSH connection).
    Whats not happening with NAT is that the second connection is not being made to
    the firewall. The firewall and the router are not blocking the call. It is just
    not being made.
    Thanking you in advance!!!
    Nathaniel

  • Carrier Grade Network Address Translation (CG-NAT)

    Hello,
    I live in the UK.  One of the largest ISPs, BT, has begun trialling carrier grade network address translation (CG-NAT).  In a nutshell, this introduces double NAT - first your broadband router, then the ISP's "router".  This is before the ISP has introduced IPv6.
    I fear it is only a matter of time before my ISP also introduces CG-NAT.  Will/does Skype work in a CG-NAT scenario?  If not, what are my options?
    Kind regards,
    Anwar

    I am new to Oracle VM. The dom0 and domU are set up by someone else. So I don't know the details. In the domU, I can't even ping the 10.244.69.35 address of the dom0.
    # ping 10.244.69.35
    PING 10.244.69.35 (10.244.69.35) 56(84) bytes of data.
    From 192.168.200.50 icmp_seq=2 Destination Host Unreachable
    From 192.168.200.50 icmp_seq=3 Destination Host Unreachable
    From 192.168.200.50 icmp_seq=4 Destination Host Unreachable
    The Cisco switch on the 10.*.*.* network is owned by IT and I can't change anything on it. This is why I try to set up NAT on the dom0. I would appreciate any help so that I can access the 10.*.*.* network from the domU.

  • Network Address Translation, Automatic Port Forwarding

    Does the Airport Extreme do
    Network Address Translation? Do I have to do something to make NAT functional?
    Does the Airport Extreme automatically forward ports? Or is this something I have to do manually
    sorry if this is discussed already but a Search of Forum did did not yield the information I need.

    Hi Barbara, welcome to the discussion area!
    +Does the Airport Extreme do Network Address Translation?+
    Yes
    +Do I have to do something to make NAT functional?+
    No, if you have the device configured as a router with the Connection Sharing settings set to Share a public IP address so that the AirPort Extreme is handling the chore of assigning IP addresses to connected devices.
    If you have the AirPort Extreme configured as a "bridge", then NAT is handled by the router that is upstream of the AirPort Extreme.
    +Does the Airport Extreme automatically forward ports? Or is this something I have to do manually+
    Port forwarding must be setup manually on the AirPort Extreme using AirPort Utility, the application used to setup the AirPorts.

  • How do I disable Network Address Translator on my macbook?

    I am getting a notice that Back to my Mac will not work because I have more than one device on my network providing NAT (network address translation).  It says to try disabling NAT on one of the devices.  How do you do that?

    Airport Extreme needs to be  in Bridge Mode.
    Here: http://support.apple.com/kb/TS1208

  • On UPnP and NAT (Network Address Translation)

    Why UPnP is an often asked Question.
    This article goes a long way to say why.
    A couple of Quotes
    *What is UPnP?*
    Universal Plug and Play (UPnP) is an architecture for pervasive peer-to-peer network connectivity of PCs and intelligent devices or appliances, particularly within the home. UPnP builds on Internet standards and technologies, such as TCP/IP, HTTP, and XML, to enable these devices to automatically connect with one another and work together to make networking - particularly home networking - possible for more people.
    *Are there other ways to solve the problem of NAT traversal? If so, why is using UPnP the best choice?*
    Yes, there are other ways to solve this problem, but no other mechanism currently exists as an industry standard to address this problem in an automatic way for the consumer and in such a universally-applicable way for the developer.
    Simply Automated Starter Package
    Other approaches require either manual intervention by the user or they require special development efforts by the Internet gateway device vendor and the software developer to handle the NAT traversal needs of specific applications. As a result, UPnP is uniquely able to solve this important problem.
    *Consumer does the work.* The manual intervention methods of NAT traversal require a consumer to use a browser, a graphical user interface-based tool on the PC, or a command line interface tool on the PC to change some settings on the Internet gateway device in the home. While some technical enthusiast users have little difficulty with this, many consumers do not feel comfortable doing this. Further, many consumers may not even realize that NAT traversal problems are interfering with their use of services across the Internet. _The user may be attempting to play a multi-player game or engage in some other peer-to-peer service but find he or she cannot connect for some reason._ This leads to troubleshooting, support calls, customer dissatisfaction, and reluctance on the part of the user to try new services or experiences in the future.
    *Developer does the work.* To avoid requiring the consumer to solve this NAT traversal problem manually, some Internet gateway device vendors have written and included application layer gateway support into their devices. This application layer gateway software is designed with specific applications in mind. In other words, the device vendor writes and tests specific code that will automatically enable one application to go through the NAT. If the application software is updated, the application layer code the device vendor wrote may have to be updated and tested again. This one-at-a-time way of chasing the NAT traversal problem is manageable for device vendors when there are only a few peer-to-peer or relevant applications to consider, but this approach does not scale well to 100s or 1000s of applications, can be very expensive to pursue, and likely requires specific knowledge of how each of these applications function. The better way to approach this problem is to have the device vendor add software or firmware to their device once to understand UPnP and have other devices and software be able to communicate with the NAT device using this same technology. UPnP is uniquely able to fulfill this role today.
    I have underlined a passage in the last.
    I hope this helps in some way.
    6:58 PM Tuesday; January 1, 2008

              Look for bindAddr in the weblogic.properties doc.
              weblogic.system.bindAddr
              You can use a dns name instead of an ip address
              Mike
              David Chen <[email protected]> wrote:
              >We are planning to add a client that needs to access our weblogic cluster
              >through firewalls with IP address translation. According to the WebLogic
              >(5.1) documentation, this could be done by opening port 7001 in the
              >firewalls, and BIND WebLogic SERVER INSTANCES TO DNS NAMES. Does anyone
              >know how to bind WebLogic server instances to DNS names? Should it be
              >done in weblogic.properties?Thanks in advance,David [email protected]
              

  • How to disable Network Address Translation

    how to disable Network Address Translation

    Hi KalaiArasu.K,
    As Chen V said, please tell us more detailed information about your requirement.
    In addition, please refer to the two following links to learn how to disable Network and computer from Explorer Navigation Pane:
    How to Add or Remove Network from the Windows 7 Navigation Pane
    http://www.sevenforums.com/tutorials/39699-network-add-remove-navigation-pane.html
    How to Remove “Computer” from Windows 7 Explorer Navigation Pane?
    http://www.askvg.com/how-to-remove-computer-from-windows-7-explorers-navigation-pane/
    Note: Since the website is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information. What’s more, incorrectly editing the registry
    may severely damage your system. Before making changes to the registry, you should back up any valued data.
    For your infomation, plase refer to the following article to learn how to configure a Registry Item via GPO:
    Configure a Registry Item
    http://technet.microsoft.com/en-us/library/cc753092.aspx
    Regards,
    Lany Zhang

  • ASA 5510 Network address translation through an internal network.

    Is it possible to perform static Nat's through an internal network?
    Here's my situation I have a ASA 5510 with a public outside interface (let’s call it 68.68.68.1), and I have an inside private IP address (192.168.1.2/24). The inside IP address leads to a 4900m with that interface being configured with a 192.168.1.1 (no switching). On the 4900 M I have several VLANs one of them is an internal DMZ of sorts. (192.168.2.0/24). Within this DMZ network are several Web servers which need to be associated a public IP address (68.68.68.x).
    Every time I configure a static Nat to associating a public IP address with an internal IP address within the DMZ, packet Tracer on the ASA informs me that the packet gets dropped at the static Nat and I cannot figure out why this is so.
    Safe it to say my question still stands is it possible to Nat (68.68.68.222 to and 92.168.2.60) given the configuration above, and how would I go about configuring in such the manner above so that I acn apply static nat through the 192.168.1.0 network to reach the 192.168.2.0 network.
    Any help on this matter is greatly appreciated. Thank you.

    more information  as requested
    csc# sh int ip br
    Interface                  IP-Address      OK? Method Status                Protocol
    Ethernet0/0                192.168.1.2   YES CONFIG up                    up
    Ethernet0/1                172.16.2.3      YES CONFIG up                    up
    Ethernet0/2                192.168.12.1    YES CONFIG up                    up
    Ethernet0/3                68.68.68.1   YES CONFIG up                    up
    Internal-Control0/0        127.0.1.1       YES unset  up                    up
    Internal-Data0/0           unassigned      YES unset  up                    up
    Management0/0              192.168.19.1    YES manual administratively down down
    csc-ssm# sh nameif
    Interface                Name                     Security
    Ethernet0/0              inside                   100
    Ethernet0/1              %^&*%$                   100
    Ethernet0/2              @#$%&*()                  30
    Ethernet0/3              outside                    0
    Management0/0            management               100
    nat (inside) 0 access-list nat0
    nat (inside) 1 serverNET 255.255.255.0
    nat (inside) 1 Server 255.255.255.0
    nat (inside) 1 192.168.8.0 255.255.255.0
    nat (inside) 1 CorpVPN 255.255.255.0
    nat (inside) 1 192.168.30.0 255.255.255.0
    nat (Eng) 0 access-list ENG_nat0_outbound
    nat (Eng) 1 172.16.2.0 255.255.255.0
    nat (WiFi-Guest) 1 192.168.12.0 255.255.255.0
    global (ENG) 2 172.16.2.10-172.16.2.50 netmask 255.255.255.0
    global (outside) 1 interface

  • Making internet sharing work (Issue with Network Address Translation)

    Trying to use internet sharing to enable a BluRay player to get access to the internet for firmware updates, BDLive, etc.
    MacBook Pro is setup with Airport (en1) enabled and connected to the internet.
    Ethernet port (en2) is set to "Configure IPv4: Off."
    I have configured the /etc/bootpd.plist file with the following configuration as mentioned in http://www.macosxhints.com/article.php?story=20071223001432304&query=xbox%2B360.
    <key>replythresholdseconds</key>
    <integer>0</integer>
    After starting up Internet Sharing, the following is observed:
    Ethernet port(en2) is reporting 192.168.2.1 as its IP address in Network Utility but not in the Network System Preferences Pane.
    The Mac is responding to the DHCP request from the BluRay player and the BluRay is assigned an IP address of 192.168.2.2/24 with a default gateway and DNS of 192.168.2.1.
    So you think there would be success with this but wrong. The system log is reporting that NATD "failed to write packet back (No route to host)" or "failed to write packet back (Host is down) and the connection test on the BluRay player is consistently failing.
    Even manually configuring the ethernet port on the Mac is resulting in failure. Is there something else I'm overlooking?
    Hoping someone can spread some light on this. Thanks.

    Ashy Larry wrote:
    So you were able to get it to work then?
    I ask because I want to get the Sony BDP-N460 Bluray player for my parents, as it's the only Sony player aside from the Playstation 3 that is Netflix capable. I'm not sure why their other wi-fi enabled player doesn't have Netflix on it. I suppose I could get them a Playstation 3, but they don't really need one.
    More than likely that Sony is positioning its products that way so people do go for the PS3 and increase it install base and possibly get you to by a game or two.
    I want to connect the player to an old iBook G3 that's running 10.4 and share its connection. I did this successfully with the iBook and my Xbox 360 and wanted to know if it was possible to do so with a Bluray player.
    I would bet that you will be able to accomplish this if you were able to get a 360 running through it. Just ignore the Blu-Ray player's test connection tool and try to connect to Netflix. Just play it safe and buy it through a retailer like Amazon where returns are hassle free.

  • Network Address Translation in Java

    Hi to all,
    Can any one explain me if is possible to realize a NAT in java?!?
    Are RFC's 3022 and 1918 useful for my purposes?!?
    If it's possible, can anyone post the code or the link where I can find it?!?
    Thanks...

    To do NAT properly you need lower level access to the IP stack than Java provides. There are also a good variety of NAT servers available.
    A good open source choice is Linux IPMasquerade. You can use an old surplus PC (pentium II 233 or better) with Linux and IPMasquerade and IPChains to build a quite respectable firewall and NAT server that is more secure than anything running under windows. I got over 100,000 hits on google for ip masquerade, eg. http://en.tldp.org/HOWTO/IP-Masquerade-HOWTO.
    Another choice is if you use a Linksys DSL router or similar device, this will connect you to cable or ADSL and do NAT for you. The router is less than $50.00 US.
    Given these conditions a NAT in java is hardly worth it.

  • RE: 1) Changing name and IP address of an AIX 4.2 Server 2)Using NAT

    Daniel,
    you (normaly) just have to :
    1) edit the $FORTE_ROOT/fortedef.sh fileand change the value of variable
    FORTE_NS_ADDRESS
    2) shutdown and restart forte environment
    3) put the new values in the control panel of the client and run !
    It worked on our site with the same configuration (Aix 4.2)
    Good luck
    De : Daniel[SMTP:[email protected]]
    R&eacute;pondre &agrave; : Daniel
    Date : vendredi 18 juin 1999 13:08
    A : [email protected]
    Cc : Jose Ignacio
    Objet : 1) Changing name and IP address of an AIX 4.2 Server 2)
    Using NAT to reach forte
    Hello Forte Users :
        I have 2 questions to make:
        1)
        I've installed a Forte Server Central Node (Release 3.0.F.2) in an
    IBM RS/6000  with OS AIX 4.2
        (The name of the server is Name_1 and the IP address is
    125.125.50.50 with mask 255.255.255.0)
        Nowadays we had to change the name and IP address of this server
    lets say to Name_2 and 125.125.60.60 with mask 255.255.255.0.
        After that we try to find any reference to old name and IP address
    in the forte directory and all of its subdirectories changing them to
    the new ones.
        After these changes we found than forte could'nt start the nodemgr
    server.
        We have too many reasons to avoid installing FORTE again.
        Does anybody know if I have to change anything more to make
    nodemgr server work.
        2)
        The second question is about NAT (Network Address Translation).
        To reach a Forte Server Central Node from a Forte Client we have
    to pass through a Firewall and NAT.
        We are researching and at this moment we can not reach the server
    from the client, has anybody any suggestion to correctly configure
    Forte (Client and Server) to use NAT between them.
        If anyone could help me I would be very pleased.
        Thank you very much in advance,
        Daniel Gonz&aacute;Lucas (EAM Sistemas Inform&aacute;ticos SL, Spain,
    e-mail: [email protected])
    To unsubscribe, email '[email protected]' with
    'unsubscribe forte-users' as the body of the message.
    Searchable thread archive <URL:http://pinehurst.sageit.com/listarchive/>

    >> 15 Mins is not enough for completely the replication.
    >> use repadmin /syncall /aEpd   - for force replication.
    >> Wait 3 hrs minimum.
    Regards,
    Biswajit
    MCTS, MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, Enterprise Admin, ITIL F 2011
    Blog:
      Script Gallary:
      LinkedIn:
    Note: Disclaimer: This posting is provided & with no warranties or guarantees and confers no rights..

  • Sticky load balancing not working  because of Address Translation

              This came up before - see below. I don't understand what the
              soltion is/was.
              WL Server puts it's ip address in the WebLogicSession cookie
              which is an internal address 192.168.201.41
              WL proxy knows WL Server only by an external address like 139.141.38.21. Since
              it does not know of any WLS with an IP
              address of 192.168.201.41, it round-robins the request instead
              of sending it to the primary WLS.
              Any help is much appreciated.
              Mike Reiche
              Robert Patrick <[email protected]> wrote:
              >Hi,
              >
              >A very typical configuration is to put the web server in the DMZ (i.e.,
              >between
              >an outer and inner firewall) and proxy the requests from the web server
              >to the
              >WebLogic server (which sits behind the inner firewall). Since all of
              >these
              >proxied requests use HTTP and a single port, the only port that needs
              >to be
              >opened in the inner firewall is an HTTP port (the outer firewall will
              >only need
              >an HTTP and/or HTTPS port opened).
              >
              >Hope this helps,
              >Robert
              >
              >Eytan Ben-Meir wrote:
              >
              >> Thanks Patrick,
              >>
              >> May be you can suggest options for securing a WLS behind a firewall?
              >>
              >> Thanks again,
              >>
              >> Eytan
              >>
              >> Robert Patrick wrote:
              >>
              >> > Hi,
              >> >
              >> > The problem is that we encode location information (e.g., IP address(es))
              >> > in the session id. If the plugin sees a session id, it decodes the
              >> > session id to find out where to route the request (i.e., which server
              >in
              >> > the cluster contains the HttpSession object for that session). Since
              >the
              >> > plugin cannot find the machine whose IP address is encoded in the
              >session
              >> > id (because of the network address translation), this will not work.
              > In
              >> > general, distributed application software needs to be modified to
              >be
              >> > capable of handling network address translation -- to my knowledge,
              >> > WebLogic Server has not been modified to support this feature (though
              >the
              >> > Enterprise version of the product has had this support for years).
              >> >
              >> > Hope this helps,
              >> > Robert
              >> >
              >> > Eytan Ben-Meir wrote:
              >> >
              >> > > Hi,
              >> > >
              >> > > Configuration:
              >> > > WLS 4.5.1 on Solaris 2.7 inside a firewall.
              >> > > SonicWall firewall with NAT (Network Address Translation).
              >> > > Netscape Enterprise Server 4.0 outside the firewall with Weblogic
              >> > > NSAPI-BRIDGE (sp 5)
              >> > >
              >> > > The problem:
              >> > > When a browser request is sent to the NE web-erver (directed to
              >the
              >> > > firewall who then redirects to a Weblogic servlet).
              >> > > IF The servlet creates a httpsession (with or without cookies)
              >the
              >> > > request fails (the firewall blocks a request directed directly
              >at the
              >> > > non-routable ip address of the Weblogic machine inside the firewall.
              >> > > IF on the other hand the servlet does not create a http session,
              >all
              >> > > works fine.??????????
              >> > > Does any body know something about this????
              >> > >
              >> > > Thanks,
              >> > >
              >> > > Eytan
              >
              

              This isn't my problem.
              "Mike Reiche" <[email protected]> wrote:
              >
              >This came up before - see below. I don't understand what the
              >soltion is/was.
              >
              >WL Server puts it's ip address in the WebLogicSession cookie
              > which is an internal address 192.168.201.41
              >
              >WL proxy knows WL Server only by an external address like 139.141.38.21.
              > Since
              >it does not know of any WLS with an IP
              >address of 192.168.201.41, it round-robins the request instead
              >of sending it to the primary WLS.
              >
              >Any help is much appreciated.
              >
              >Mike Reiche
              >
              >Robert Patrick <[email protected]> wrote:
              >>Hi,
              >>
              >>A very typical configuration is to put the web server in the DMZ (i.e.,
              >>between
              >>an outer and inner firewall) and proxy the requests from the web server
              >>to the
              >>WebLogic server (which sits behind the inner firewall). Since all of
              >>these
              >>proxied requests use HTTP and a single port, the only port that needs
              >>to be
              >>opened in the inner firewall is an HTTP port (the outer firewall will
              >>only need
              >>an HTTP and/or HTTPS port opened).
              >>
              >>Hope this helps,
              >>Robert
              >>
              >>Eytan Ben-Meir wrote:
              >>
              >>> Thanks Patrick,
              >>>
              >>> May be you can suggest options for securing a WLS behind a firewall?
              >>>
              >>> Thanks again,
              >>>
              >>> Eytan
              >>>
              >>> Robert Patrick wrote:
              >>>
              >>> > Hi,
              >>> >
              >>> > The problem is that we encode location information (e.g., IP address(es))
              >>> > in the session id. If the plugin sees a session id, it decodes
              >the
              >>> > session id to find out where to route the request (i.e., which server
              >>in
              >>> > the cluster contains the HttpSession object for that session).
              >Since
              >>the
              >>> > plugin cannot find the machine whose IP address is encoded in the
              >>session
              >>> > id (because of the network address translation), this will not work.
              >> In
              >>> > general, distributed application software needs to be modified to
              >>be
              >>> > capable of handling network address translation -- to my knowledge,
              >>> > WebLogic Server has not been modified to support this feature (though
              >>the
              >>> > Enterprise version of the product has had this support for years).
              >>> >
              >>> > Hope this helps,
              >>> > Robert
              >>> >
              >>> > Eytan Ben-Meir wrote:
              >>> >
              >>> > > Hi,
              >>> > >
              >>> > > Configuration:
              >>> > > WLS 4.5.1 on Solaris 2.7 inside a firewall.
              >>> > > SonicWall firewall with NAT (Network Address Translation).
              >>> > > Netscape Enterprise Server 4.0 outside the firewall with Weblogic
              >>> > > NSAPI-BRIDGE (sp 5)
              >>> > >
              >>> > > The problem:
              >>> > > When a browser request is sent to the NE web-erver (directed to
              >>the
              >>> > > firewall who then redirects to a Weblogic servlet).
              >>> > > IF The servlet creates a httpsession (with or without cookies)
              >>the
              >>> > > request fails (the firewall blocks a request directed directly
              >>at the
              >>> > > non-routable ip address of the Weblogic machine inside the firewall.
              >>> > > IF on the other hand the servlet does not create a http session,
              >>all
              >>> > > works fine.??????????
              >>> > > Does any body know something about this????
              >>> > >
              >>> > > Thanks,
              >>> > >
              >>> > > Eytan
              >>
              >
              

  • Time capsule first said the back up was delayed no it won't connect to my home network. my internet is working fine and so is everything else but when i try to connect to the time capsule it says to check my server and ip address help!

    time capsule first said the back up was delayed, now it won't connect to my home network. my internet is working fine and so is everything else but when i try to connect to the time capsule it says to check my server and ip address and if it continues to contact system administrator.. i didnt change anything, please help!

    Lion networking.. just need to reboot everything.. modem TC and the clients.. then it will work.. Sometimes just the TC is enough.. sometimes just the computer. .. Vista golden networking award.. did you turn it off and on again??

  • Question on cluster and firewall IP address translation

    We are planning to add a client that needs to access our weblogic cluster through firewalls with IP address translation. According to the WebLogic (5.1) documentation, this could be done by opening port 7001 in the firewalls, and BIND WebLogic SERVER INSTANCES TO DNS NAMES. Does anyone know how to bind WebLogic server instances to DNS names? Should it be done in weblogic.properties?Thanks in advance,David [email protected]
              

              Look for bindAddr in the weblogic.properties doc.
              weblogic.system.bindAddr
              You can use a dns name instead of an ip address
              Mike
              David Chen <[email protected]> wrote:
              >We are planning to add a client that needs to access our weblogic cluster
              >through firewalls with IP address translation. According to the WebLogic
              >(5.1) documentation, this could be done by opening port 7001 in the
              >firewalls, and BIND WebLogic SERVER INSTANCES TO DNS NAMES. Does anyone
              >know how to bind WebLogic server instances to DNS names? Should it be
              >done in weblogic.properties?Thanks in advance,David [email protected]
              

  • DSfW and eDirectory Network Address attribute

    Hi,
    In a DSfW environment, with Windows only clients, we lose the update of the attribute "network address". We need it to provide SSO with the proxy authorization.
    Does anyone know if is possible to have the same behaviour than with the Novell Client? Any idea to have the windows client logon to DSfW updating the network attribute on eDirectory?
    Regards
    Jose Luis

    I am pretty sure, that the SSO agent/application of the Fortinet is
    able to use AD as a SSO source to the proxy. That can't be done in the
    same way as against Edir, but it does work well.
    I have a Sonicwall SSO based on the AD of DSfW and it works great.
    Based on the complexity of my setup, where the connection to the
    internet runs on a physical and logical network, which is completely
    different and separated from the local network connections to the DSfW
    and all other servers I am quite sure, that it would work in a less
    complex setup just out of the box without big configuratrion hassles.
    W. Prindl
    jlrodriguez wrote:
    >
    >Thanks for your answer. But the problem is that who has to read for
    >the IP Address is the proxy (PaloAlto/Fortinet). It does it searching
    >in eDirectory the user that has in the "network address" attribute
    >the IP address of the workstation trying to access Internet, and
    >applying then the corresponding policies.
    >It works perfectly if the workstation has the Novell Client, but not
    >without it.
    >Regards

Maybe you are looking for

  • Powerbook Lower Memory Slot Issue, what are my options?

    Hi there, I have a Powerbook G4 1.5ghz that I purchased in October of 2004. I had no problems with it until after upgrading the RAM to 2 x 512mb chips and then installing Tiger which resulted in me later notcing the missing RAM and learning about the

  • Vista and ipod nano driver not recognized?

    My computer (vista) won't recognize my ipod nano second generation. It tells me driver not recognized? So when I plug in my ipod a little screen pops up and tells me that No drivers are installed for this device. Where can I download a driver Thanks,

  • Picture encoding issues in IE

    I've created a website with iWeb and published it to my .mac account. The only issue I've run into is for people viewing it in IE. Everything views ok except with the blog. When you click an individual blog, the picture that accompanies that specific

  • PowerMac vs iMac - Speed

    Hi, I've been offered an 800 mhz PowerMac. I currently have an 800 mhz iMac. Presuming they both have the same amount of RAM and the same version of OSX installed, is the PowerMac likely to be any quicker? Thanks. -Mark

  • Help with 7.0.1 Software

    Since being prompted to install 7.0.1 my iTunes does not work. I have read the faq, and suggestions on this BBS, but none of them work. Can I revert back to a previous version of iTunes. Mike seems to be a lot of trouble with 702, or is it just me?