What blocks network drive mapping

%3CLINGO-SUB%20id%3D%22lingo-sub-304255%22%20slang%3D%22en-US%22%3EWhat%20blocks%20network%20drive%20mapping%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-304255%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20user%20works%20at%20home%20PC%20and%20use%20Cisco%20VPN%20to%20connect%20to%20the%20office.%20he%20has%20a%20problem%20to%20map%20LAN%20shared%20folders%20over%20VPN.%20The%20error%20message%20is%20You%20do%20not%20have%20permissions%20to%20access%20%5C%5Cservername%5Cfoldername..%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWe%20have%20tried%20these%3A%3CBR%20%2F%3E1.%20It%20is%20not%20DNS%20issue%20because%20when%20we%20try%20IP%20address%2C%20we%26nbsp%3Bget%20the%20same%20problem.%3CBR%20%2F%3E2.%20Disable%20Symantec%20Endpoint%20Protection%20and%20Windows%20firewall%20for%20a%20test.%20But%20that%20doesn't%20fix%20the%20problem.%3CBR%20%2F%3E3.%20Telnet%20ip%20address%20port%20445%2C%20get%20timeout%2C%20meaning%20some%20thing%20blocks%20accessing.%3CBR%20%2F%3E4.%20Check%20%E2%80%9CControl%20Panel%5CAll%20Control%20Panel%20Items%5CNetwork%20and%20Sharing%20Center%5CAdvanced%20sharing%20settings%E2%80%9D.%20Make%20sure%20Network%20discovery%20is%20turn%20on.%3CBR%20%2F%3E5.%20Enable%20SBMV1%20by%20going%20to%20Programs%20and%20Features.%3CBR%20%2F%3E6.%20The%20same%20user%20using%20other%20VPN%20client%20doesn%E2%80%99t%20have%20this%20issue.%3CBR%20%2F%3E7.%20Tried%20different%20domain%20admin%20account%20in%20his%20PC%2C%20have%20the%20same%20problem.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20think%20there%20is%20a%20security%20software%20blocking%26nbsp%3Bthe%20map%20on%20the%20home%20computer.%20How%20can%20we%20find%20it%3F%20Is%20the%20SEP%20having%20some%20settings%20need%20to%20check%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-304622%22%20slang%3D%22en-US%22%3ERe%3A%20What%20blocks%20network%20drive%20mapping%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-304622%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20Ran%26nbsp%3B%20there%20is%20a%20security%26nbsp%3Bpolicy%20in%20the%20Cisco%20unit%20ASA%20or%20IOS%20etc%20and%20another%26nbsp%3Bpolicy%20in%20the%20VPN%20Client%20Profile%20that's%20been%20assigned%20to%20your%20logon%20so%20there%20needs%20to%20be%20a%20policy%20change%20to%20allow%20you%20to%20do%20it.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ESo%20your%20IT%20Manager%20or%20Security%20guy%2C%20if%20that's%20you%20then%20get%20on%20the%20cisco%26nbsp%3Bwebsite%20and%20a%20few%20tech%20sites%20will%20have%20a%20walk%20through.%20To%20test%20it%20(don't%20amend%20the%20defaults%2C%20setup%20new%20profiles%20and%20you%20can%20then%20assign%20the%20user%20to%20that%20to%20test%20it%20all)%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Ehope%20that%20helps%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E
New Contributor

The user works at home PC and use Cisco VPN to connect to the office. he has a problem to map LAN shared folders over VPN. The error message is You do not have permissions to access \\servername\foldername..

 

We have tried these:
1. It is not DNS issue because when we try IP address, we get the same problem.
2. Disable Symantec Endpoint Protection and Windows firewall for a test. But that doesn't fix the problem.
3. Telnet ip address port 445, get timeout, meaning some thing blocks accessing.
4. Check “Control Panel\All Control Panel Items\Network and Sharing Center\Advanced sharing settings”. Make sure Network discovery is turn on.
5. Enable SBMV1 by going to Programs and Features.
6. The same user using other VPN client doesn’t have this issue.
7. Tried different domain admin account in his PC, have the same problem.

 

I think there is a security software blocking the map on the home computer. How can we find it? Is the SEP having some settings need to check?

1 Reply

Hi Ran  there is a security policy in the Cisco unit ASA or IOS etc and another policy in the VPN Client Profile that's been assigned to your logon so there needs to be a policy change to allow you to do it.

 

So your IT Manager or Security guy, if that's you then get on the cisco website and a few tech sites will have a walk through. To test it (don't amend the defaults, setup new profiles and you can then assign the user to that to test it all)

 

 

hope that helps