Scan over VPN

[fitchn]

I was having no luck scanning over VPN (Cisco ASA to Cisco PIX) to any of my remote offices via v3.5.2. I am now trying 4.0 beta, but am still having issues. The weird thing is that one of my vista computers that I have in a remote office has scanned, but none of the XP computers in any of the offices, including that office, have given info other than name. I have one other vista computer in another office and it has not scanned. All are showing RPC server is unavailable 0x800706BA unavailable and DCOM port 135.

Steps taken so far:
1. tried /scanonip switch on several computers in different offices
2. opened tcp port 135 for tunnels at both ends (client OS firewalls are disabled for now)
3. tried the netsh interface tcp set global autotunninglevel=disabled (CMD not found on any XP PC's I have tried)
4. testconnection.exe output is:

\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote WMI test
-----------------------------------------------
\root\cimv2 Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

Remote Registry test using WMI
-----------------------------------------------
\root\default Remote WMI access test FAILED
The RPC server is unavailable. (Exception from HRESULT: 0x800706BA)

[Hemoco]

You most likely have a group policy that sets the firewall:

Profile = Domain
Remote admin mode = Disable

See: http://www.lansweeper.com/kb/firewall.aspx

[fitchn]

Ran commands, all said OK.

Still not scanning.

Note working XP computer x.x.x.40 output below:


Firewall status:
-------------------------------------------------------------------
Profile = Domain
Operational mode = Disable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable
Group policy version = Windows Firewall
Remote admin mode = Disable

Ports currently open on all network interfaces:
Port Protocol Version Program
-------------------------------------------------------------------
10243 TCP IPv4 (null)
10280 UDP IPv4 (null)
10281 UDP IPv4 (null)
10282 UDP IPv4 (null)
10283 UDP IPv4 (null)
10284 UDP IPv4 (null)
137 UDP IPv4 (null)
139 TCP IPv4 (null)
138 UDP IPv4 (null)
445 TCP IPv4 (null)
5631 TCP IPv4 C:\Program Files\Symantec\pcAnywhere\AWHOST32.EXE
5632 UDP IPv4 C:\Program Files\Symantec\pcAnywhere\AWHOST32.EXE
2638 UDP IPv4 C:\LCOS\DB\dbsrv9.exe
2638 TCP IPv4 C:\LCOS\DB\dbsrv9.exe
2869 TCP IPv4 (null)
1900 UDP IPv4 C:\WINDOWS\system32\svchost.exe

[Hemoco]

Remote admin should be set to "enable"

Try this script:

call netsh firewall set service RemoteAdmin enable
call netsh firewall add portopening protocol=tcp port=135 name=DCOM_TCP135
call netsh firewall add allowedprogram program=%windir%\system32\wbem\unsecapp.exe name=WMI
call netsh firewall add allowedprogram program=%windir%\system32\dllhost.exe name=Dllhost

[fitchn]

Current status is 1 Vista computer at one of our offices scans, and 1 XP computer at another office scans. All others not scanning as per first post. Below are the readings on 2 XP computers at one of our offices. (computer that scans is x.x.x.40, computer that won't is x.x.x.41):

Yes, the server is able to resolve the address.

Firewall status: (for x.x.x.41)
-------------------------------------------------------------------
Profile = Domain
Operational mode = Disable
Exception mode = Enable
Multicast/broadcast response mode = Enable
Notification mode = Enable
Group policy version = Windows Firewall
Remote admin mode = Disable

Ports currently open on all network interfaces:
Port Protocol Version Program
-------------------------------------------------------------------
58423 TCP IPv4 C:\Program Files\Skype\Phone\Skype.exe
58423 UDP IPv4 C:\Program Files\Skype\Phone\Skype.exe
80 TCP IPv4 C:\Program Files\Skype\Phone\Skype.exe
443 TCP IPv4 C:\Program Files\Skype\Phone\Skype.exe
443 UDP IPv4 C:\Program Files\Skype\Phone\Skype.exe


Error from webpage scanning::

Smi_lcos DomainName WMIERROR The RPC server is unavailable 0x800706BA (smi_lcos.DomainName.com, DomainName\SMI_LCOS\1, x.x.x.40) 02/03/2010

Smi_lcos2 DomainName WMIERROR The RPC server is unavailable 0x800706BA (x.x.x.41) 02/03/2010

[Hemoco]

Which ports are open on your firewall?
The service first connects on port 135 then uses random ports.

Is the server able to resolve the IP address?

Could you post a "netsh firewall show state" of a problem computer.
Could you post the exact error from the webpage (not the connection tester)

[fitchn]

Does anyone have any ideas? We need to resolve this one issue before we will get authorization to purchase. Please help.