Outgoing SSTP connection can pass through any kind of NAT and firewalls - as long as TCP port 443 is allowed (which is normally the case). If the VPN client is behind a web proxy, then outgoing SSTP connection can go through in normal web proxy. SSTP does not support "authenticated" web proxies (i.e. proxies which require some form of authentication during HTTP CONNECT request).

Yes. You must ensure however, that port 3306 is available in order to permit connection to your remote mySQL server. Network Address Translation boxes are not a problem. Non-translating proxies might be however - contact your systems administrator if you are operating under a proxy to ensure that packets will be properly routed.

It should work with any type of firewall including Symmetric NAT. Symmetric NAT is performed only by advanced enterprise routers, in that case NATPass™ will recognize this scenario and will make the call succeed by signaling and doing RTP bridging. It is all transparent for the user and there is no need to reconfigure anything.

The NAT traversal solution is part of the work being done on the specification for the Internet Gateway Device (IGD) by the UPnP IGD Working Committee. UPnP member companies may join this committee or merely choose to monitor its progress. The chair of the committee is Prakash Iyer from Intel (prakash.iyer@intel.com). Many organizations, including Microsoft, drove this effort.

Yes. We do support NAT Traversal Draft 1 (enhanced), Draft 2 and 3 (full implementation). IP address emulation. Yes, the IPSec VPN Client does support le "Mode-Config". "Mode-Config" is an Internet Key Exchange (IKE) extension that enables the IPSec VPN gateway to provide LAN configuration such as DNS/WINS server addresses to the remote user's machine (i.e. IPSec VPN Client).

If you are running through separate proxies for each service, you shouldn't need to do anything. If you are working through sockd, you will need to "socksify" your application. Details for doing this can be found in the package itself, which is available at:

NAT traversal is important to support access to the business network by a remote client, such as a telecommuter using a VPN client on their computer. The VPN tunnel only functions if the IPSec packet integrity is maintained throughout the tunnel, and NAT Traversal enables a "keep alive" function for each packet. This feature is essential for a truly business-class VPN solution.

For IHVs this solution removes the need for writing and maintaining a database of Application Layer Gateways (ALGs) to traverse the NAT. This solution will be supported by both Windows XP and Direct Play, a programming resource in Windows, so software applications written to DPlay will be able to use the UPnP solution for NAT traversal automatically. The UPnP Forum's IGD spec achieves this automatic NAT traversal by providing methods for the following:

FTP CLIENT will work with a proxy server or firewall as long as the proxy server or firewall is a "true" FTP proxy or firewall -- not one that substitutes FTP protocol with HTTP. (Note that Web browsers convert FTP to HTTP commands which is why a browser might work with a firewall when FTP Client will not.) If you are behind a [proxy server or] firewall, fill in the Firewall is tab in the Connection screen.

For best results, you should open/redirect ports 6881-6890 (this will allow for 10 concurrent transfers) to the machine you're running burst! on. If you cannot redirect these ports, but there is a port already redirected, then into Advanced: enter "--minport x --maxport y" without the quotes, replacing x and y where approriate.

A firewall is a program that protects the resources of a private network from users from other networks. They are also often used by businesses to prevent employees from accessing certain ports or programs. Depending on the setup of the firewall, you may be prevented from accessing etree.org servers when behind a firewall. A proxy or gateway is an intermediate program that connects an internal network to the outside internet. Proxys can also be used as caching or logging servers.

Currently most of the large gateway (DSL/Cable router) vendors have announced intentions to implement the UPnP NAT traversal solution in products they ship in 2001, beginning as soon as July. They include: Microsoft in WindowsXP, Linksys, D-Link, Intel, Netgear and Buffalo Technology, and Arescom. Some of these vendors have announced they will provide firmware or software upgrades to customers who already own their devices to add support for UPnP-enabled NAT traversal.

Yes, though you will either have to set up port forwarding or enable UPnP support on your NAT box (internet router). Many modern NAT boxes enable UPnP by default. Note that the UPnP support is currently in beta. You will have to download some additional libraries and change one setting to make it work. See question 24.

If you intend to use PaperCut to track or quota internet use, a compatible proxy server is required. PaperCut works with the majority of leading proxy servers including, Microsoft ISA Server, Squid (Windows and Linux), Wingate, and FreeProxy. Yes. PaperCut supports a variety of charging techniques, including charging by specific page size (with different color and grayscale rates), page area charging, page size category charging, and discounts for duplex printing to encourage paper conservation.

Our first recommendation would be a hardware based NAT router such as the Linksys BEFSR41. With it, you can share your internet connection between all of your computers. Or, if you do not with to install a router, install something like BlackICE or Zone Alarm. As always, we request that you install a good antivirus package such as AVG on every computer.

You can find classification of NAT in RFC 3489 – STUN http://www.faqs.org/rfcs/rfc3489.html. It should not mater what type of firewall you have.

Yes. WuWu is completely Firewall/NAT compatible! For additional information on this topic, please read the WuWu Firewall / NAT how-to.

If you use your web browser at work, it is very likely that you are behind something called a firewall or a proxy (not the same thing, though). Most people using Internet from a school or company are behind one. These are used to act a guardian on Internet traffic to and from the company. Unfortunately, they often interfere a lot - for example, when it comes to uploading images at the Extranet. However, lots of people HAVE experienced upload problems without any firewalls or such.

Generally the answer to this is no. However, if your NAT Server allows you to perform IP Forwarding, and your network router can receive forward requests over specific ports, then you should be able to use the iSeries PC-Engine suite of tools. Check with your network technician to find out if this capability is available on your network.

Yes - Winlogon over SSTP based VPN connection is supported. The VPN connection should be created for "all users". Additionally if the VPN connection goes through a web proxy, then the web proxy settings need to be picked up from the system store. This is because in case of Winlogon - the user establishes the VPN connection first and then logs on. The web proxy settings can be configured inside the system store using "netsh winhttp set proxy" command