WorkSite MP and NAT based firewall

Hi,

I'm using WSMP4.1 SP1 HFB7 on Windows 2003. The cluster has 2 servers.

In order to support external users, I want to put a WSMP Web/TomCat on the DMZ, the firewall is CheckPoint and the mechanism is using Network Address Translation (NAT).

Before deploying the firewall, everything is working fine. After the firewall is introduced, the Web Component failed to connect to the cluster.

Can WSMP work in a NAT environment, in particular working with CheckPoint firewall?

Anyone have experience on this?

Thanks,
John

Find more posts tagged with

Comments

jman

Hi,

From the CheckPoint firewall log, the FMA UDP (port 2637) packet actually have no problem travelling from TomCat to MP Cluster then from MP Cluster back to TomCat. However, the TomCat (after receiving the UDP packet) did NOT proceed to send out the TCP 4000 request, but the following log was found in the TomCat server, any idea on when and why this log happens? Is it because WSMP is not compatible with NAT?

Please share with me your experience if you have worked with WSMP on NAT environment.

18 18:27:19.140: WARN [CmsConnectionMonitor] warn: exception=com.imanage.cms.exceptions.fma.FmaServiceNotFoundException: FmaClient.findServersWithService(): Cannot locate FMA server(s): "wimsws" ; possibly invalid name(s) or address(es)
at com.imanage.cms.fc.net.fma.FmaClient.findServiceOnServer(FmaClient.java:351)
at com.imanage.cms.fc.net.fma.FmaClient.findServiceOnCluster(FmaClient.java:276)
at com.imanage.cms.fc.net.fma.FmaClient.findService(FmaClient.java:270)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.openConnection(CMSClientInterfaceBase.java:743)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.ensureConnection(CMSClientInterfaceBase.java:920)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.executeMessage(CMSClientInterfaceBase.java:248)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceGenerated.ping(CMSClientInterfaceGenerated.java:47)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPool.isLibraryAvailable(CmsConnectionPool.java:2163)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPool.initializeConnections(CmsConnectionPool.java:180)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPoolMgr$MonitorThread.run(CmsConnectionPoolMgr.java:404)
at com.imanage.cms.fc.base.ImThread.callRun(ImThread.java:1079)
at com.imanage.cms.fc.base.ImThread.executeOneLoop(ImThread.java:1202)
at com.imanage.cms.fc.thread.ThreadHWRunner.run(ThreadHWRunner.java:141)
at java.lang.Thread.run(Thread.java:534)
com.imanage.cms.exceptions.base.AddressNotFoundException: FmaClient.findServersWithService(): Cannot locate FMA server(s): "wimsws" ; possibly invalid name(s) or address(es)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.openConnection(CMSClientInterfaceBase.java:793)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.ensureConnection(CMSClientInterfaceBase.java:920)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceBase.executeMessage(CMSClientInterfaceBase.java:248)
at com.imanage.cms.fc.cmsifc.CMSClientInterfaceGenerated.ping(CMSClientInterfaceGenerated.java:47)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPool.isLibraryAvailable(CmsConnectionPool.java:2163)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPool.initializeConnections(CmsConnectionPool.java:180)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPoolMgr$MonitorThread.run(CmsConnectionPoolMgr.java:404)
at com.imanage.cms.fc.base.ImThread.callRun(ImThread.java:1079)
at com.imanage.cms.fc.base.ImThread.executeOneLoop(ImThread.java:1202)
at com.imanage.cms.fc.thread.ThreadHWRunner.run(ThreadHWRunner.java:141)
at java.lang.Thread.run(Thread.java:534)
com.imanage.cms.exceptions.cmsconnection.CmsConnectionPoolNotAvailableException: FmaClient.findServersWithService(): Cannot locate FMA server(s): "wimsws" ; possibly invalid name(s) or address(es)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPool.initializeConnections(CmsConnectionPool.java:189)
at com.imanage.cms.fc.cmsconnection.CmsConnectionPoolMgr$MonitorThread.run(CmsConnectionPoolMgr.java:404)
at com.imanage.cms.fc.base.ImThread.callRun(ImThread.java:1079)
at com.imanage.cms.fc.base.ImThread.executeOneLoop(ImThread.java:1202)
at com.imanage.cms.fc.thread.ThreadHWRunner.run(ThreadHWRunner.java:141)
at java.lang.Thread.run(Thread.java:534)

Thanks,
John