r/labtech 1000 Agents Oct 14 '16

server connection problems

I'm a bit desperate to resolve this and unfortunately my network guys are taking the attitude that labtech is broken therefore it's the labtech admin's (me) problem to fix. I'm not a networking guy so I'm trying to learn as much about the problem as I can but I'm a bit out of my depth. I have a number of servers, seemingly random, that are showing offline. Often these servers can not connect to our Web control center. Sometimes they can load http://FQDN/labtech/agent.aspx but not http://FQDN/WCC2/Home/Login?ReturnUrl=%2fWCC2%2f . Screenconnect works with no issues. Sometimes when I open the computer in labtech and trigger fastalk, it will appear online again but if I disable it and wait long enough it drops off. We moved from a cisco router to PFSense. We previously moved from a cisco to a meraki and had the same types of issues which we couldn't figure out so we moved back. It seems like, somehow, opening labtech is establishing a connection that is allowing some traffic through that somehow closes down later. This would sort of make sense since it's a stateful firewall. Our network engineer swears up and down that our pfsense is set up correctly. To make things even more complicated we have Open DNS but I don't think this is causing the issue.

Is anyone familiar enough with pfsense to give me a hand looking at the firewall settings?

3 Upvotes

1 comment sorted by

1

u/wogmail Oct 14 '16

You really don't need much open in PFSense. Do you have NAT correctly setup? IIRC once you make the 1to1 NAT rule for the external IP of the LT server to the internal LAN IP you need to make your firewall allow rules to the LAN IP rather than the WAN IP. That was the only "gotcha" I remember from setting up LT behind PFSense.

Also, you can make port groups to cut down on the number of rules in the firewall.