Cannot access PIX by PDM

Similar Questions

• Cannot access the internal network of VPN with PIX 506th

  Hello

  I seem to have a problem with the configuration of my PIX. I ping the VPN client from the network in-house, but cannot cannot access all the resources of the vpn client. My running configuration is the following:

  Building configuration...

  : Saved

  :

  6.3 (5) PIX version

  interface ethernet0 car

  Auto interface ethernet1

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate the encrypted password of N/JZnmeC2l5j3YTN

  2KFQnbNIdI.2KYOU encrypted passwd

  hostname SwantonFw2

  domain name * *.com

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  access-list outside_access_in allow icmp a whole

  allow_ping list access permit icmp any any echo response

  allow_ping list all permitted access all unreachable icmp

  access-list allow_ping allow icmp all once exceed

  the INSIDE-IN access list allow inside the interface tcp interface outside

  list access to the INSIDE-IN permit udp any any eq field

  list access to the INSIDE-IN permit tcp any any eq www

  list access to the INSIDE-IN permit tcp any any eq ftp

  list access to the INSIDE-IN permit icmp any any echo

  the INSIDE-IN permit tcp access list everything all https eq

  permit access ip 192.168.0.0 list inside_outbound_nat0_acl 255.255.255.0 192.168.240.0 255.255.255.0

  swanton_splitTunnelAcl ip access list allow a whole

  outside_cryptomap_dyn_20 ip access list allow any 192.168.240.0 255.255.255.0

  no pager

  Outside 1500 MTU

  Within 1500 MTU

  192.168.1.150 outside IP address 255.255.255.0

  IP address inside 192.168.0.35 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP pool local VPN_Pool 192.168.240.1 - 192.168.240.254

  location of PDM 0.0.0.0 255.255.255.0 outside

  location of PDM 192.168.1.26 255.255.255.255 outside

  location of PDM 192.168.240.0 255.255.255.0 outside

  PDM logging 100 information

  history of PDM activate

  ARP timeout 14400

  Global 1 interface (outside)

  NAT (inside) 0-list of access inside_outbound_nat0_acl

  NAT (inside) 1 192.168.0.0 255.255.255.0 0 0

  Access-group outside_access_in in interface outside

  group-access INTERIOR-IN in the interface inside

  Route outside 0.0.0.0 0.0.0.0 192.168.1.1 1

  Timeout xlate 0:05:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  AAA-server GANYMEDE + 3 max-failed-attempts

  AAA-server GANYMEDE + deadtime 10

  RADIUS Protocol RADIUS AAA server

  AAA-server RADIUS 3 max-failed-attempts

  AAA-RADIUS deadtime 10 Server

  AAA-server local LOCAL Protocol

  Enable http server

  http 192.168.0.0 255.255.255.0 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  Crypto ipsec transform-set ESP-DES-MD5 esp - esp-md5-hmac

  Crypto ipsec transform-set ESP-DES-SHA esp - esp-sha-hmac

  Dynamic crypto map outside_dyn_map 20 match address outside_cryptomap_dyn_20

  Crypto-map dynamic outside_dyn_map 20 the transform-set ESP-DES-MD5 value

  map outside_map 65535-isakmp ipsec crypto dynamic outside_dyn_map

  client authentication card crypto outside_map LOCAL

  outside_map interface card crypto outside

  ISAKMP allows outside

  ISAKMP identity address

  part of pre authentication ISAKMP policy 20

  encryption of ISAKMP policy 20

  ISAKMP policy 20 md5 hash

  20 2 ISAKMP policy group

  ISAKMP duration strategy of life 20 86400

  Swanton vpngroup address pool VPN_Pool

  vpngroup swanton 192.168.1.1 dns server

  vpngroup swanton splitting swanton_splitTunnelAcl tunnel

  vpngroup idle 1800 swanton-time

  swanton vpngroup password *.

  Telnet timeout 5

  SSH timeout 5

  Console timeout 0

  dhcpd address 192.168.0.36 - 192.168.0.254 inside

  dhcpd dns 8.8.8.8 8.8.4.4

  dhcpd lease 3600

  dhcpd ping_timeout 750

  dhcpd outside auto_config

  dhcpd allow inside

  scott hwDnqhIenLiwIr9B of encrypted privilege 15 password username

  username password encrypted ET3skotcnISwb3MV privilege 2 norm

  username password tarmbrecht Zre8euXN6HxXaSdE encrypted privilege 2

  username, password jlillevik 9JMTvNZm3dLhQM/W encrypted privilege 2

  username privilege 15 encrypted password 49ikl05C8VE6k1jG ruralogic

  username bzeiter 1XjpdpkwnSENzfQ0 encrypted password privilege 2

  name of user mwalla encrypted password privilege 2 l5frk9obrNMGOiOD

  username heavyfab1 6.yy0ys7BifWsa9k encrypted password privilege 2

  username heavyfab3 6.yy0ys7BifWsa9k encrypted password privilege 2

  username heavyfab2 6.yy0ys7BifWsa9k encrypted password privilege 2

  username djet encrypted password privilege 2 wj13fSF4BPQzUzB8

  username, password cmorgan y/NeUfNKehh/Vzj6 encrypted privilege 2

  username password cmayfield Pe/felGx7VQ3I7ls encrypted privilege 2

  username privilege 2 encrypted password zQEQceRITRrO4wJa jeffg

  Terminal width 80

  Cryptochecksum:9005f35a85fa5fe31dab579bbb1428c8

  : end

  [OK]

  Any help will be greatly appreciated

  BJ,

  You try to access resources behind the inside interface network?

  IP address inside 192.168.0.35 255.255.255.0

  If so, please make the following changes:

  1 SWANTON_VPN_SPLIT permit access ip 192.168.0.0 list 255.255.255.0 192.168.240.0 255.255.255.0

  2-no vpngroup swanton splitting swanton_splitTunnelAcl tunnel

  Swanton vpngroup split tunnel SWANTON_VPN_SPLIT

  outside_cryptomap_dyn_20 3-no-list of ip access allowing any 192.168.240.0 255.255.255.0

  4 - isakmp nat-traversal 30

  Let me know how it goes.

  Portu.

  Please note all useful posts

• VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK

  I tried to set up a simple customer vpn using this document

  http://www.Cisco.com/en/us/products/sw/secursw/ps2308/products_configuration_example09186a00801e71c0.shtml

  VPN IS CONNECTED BUT CANNOT ACCESS THE INTERNAL NETWORK BEHIND "RA"...

  6.3 (5) PIX version

  interface ethernet0 car

  Auto interface ethernet1

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  activate the encrypted password of VmHKIhnF4Gs5AWk3

  VmHKIhnF4Gs5AWk3 encrypted passwd

  hostname VOIPLABPIX

  domain voicelab.com

  fixup protocol dns-length maximum 512

  fixup protocol ftp 21

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol http 80

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol sip 5060

  fixup protocol sip udp 5060

  fixup protocol 2000 skinny

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol tftp 69

  names of

  access-list 101 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 101 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.2.0 255.255.255.0 172.10.3.0 255.255.255.0

  access-list 102 permit ip 172.10.1.0 255.255.255.0 172.10.3.0 255.255.255.0

  pager lines 24

  Outside 1500 MTU

  Within 1500 MTU

  IP address outside 208.x.x.11 255.255.255.0

  IP address inside 172.10.2.2 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool voicelabpool 172.10.3.100 - 172.10.3.254

  history of PDM activate

  ARP timeout 14400

  NAT (inside) - 0 102 access list

  Route outside 0.0.0.0 0.0.0.0 208.x.x.11 1

  Route inside 172.10.1.0 255.255.255.0 172.10.2.1 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0:10:00 udp 0: CPP 02:00 0:10:00 01:00 h225

  H323 timeout 0:05:00 mgcp 0: sip from 05:00 0:30:00 sip_media 0:02:00

  Sip timeout - disconnect 0:02:00 prompt Protocol sip-0: 03:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  AAA-server GANYMEDE + 3 max-failed-attempts

  AAA-server GANYMEDE + deadtime 10

  RADIUS Protocol RADIUS AAA server

  AAA-server RADIUS 3 max-failed-attempts

  AAA-RADIUS deadtime 10 Server

  AAA-server local LOCAL Protocol

  Enable http server

  http 172.0.0.0 255.0.0.0 inside

  http 0.0.0.0 0.0.0.0 inside

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  Crypto ipsec transform-set esp-aes-256 trmset1, esp-sha-hmac

  Crypto-map dynamic map2 10 set transform-set trmset1

  map map1 10 ipsec-isakmp crypto dynamic map2

  client authentication card crypto LOCAL map1

  map1 outside crypto map interface

  ISAKMP allows outside

  ISAKMP identity address

  part of pre authentication ISAKMP policy 10

  ISAKMP policy 10 encryption aes-256

  ISAKMP policy 10 sha hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup address voicelabpool pool cuclab

  vpngroup dns 204.x.x.10 Server cuclab

  vpngroup cuclab by default-field voicelab.com

  vpngroup split tunnel 101 cuclab

  vpngroup idle 1800 cuclab-time

  vpngroup password cuclab *.

  Telnet timeout 5

  SSH 208.x.x.11 255.255.255.255 outside

  SSH 0.0.0.0 0.0.0.0 outdoors

  SSH 172.10.1.2 255.255.255.255 inside

  SSH timeout 60

  Console timeout 0

  username labadmin jNEF0yoDIDCsaoVQ encrypted password privilege 2

  Terminal width 80

  Cryptochecksum:b03a349e1ac9e6022432523bbb54504b

  : end

  Try to turn on NAT - T

  PIX (config) #isakmp nat-traversal 20

  http://www.Cisco.com/en/us/products/ps6120/products_tech_note09186a00807e0aca.shtml#Solution1

  HTH

• PIX501 customer VPN - cannot access inside the network with VPN Session

  What follows is based on the config on the attached link:

  http://www.Cisco.com/en/us/Partner/Tech/tk583/TK372/technologies_configuration_example09186a008009442e.shtml

  PIX Ver 6.2 (3) - VPN Client 3.3.6(A) - Windows XP Client PC

  We can establish the VPN to the PIX501 session, but we cannot access the network private behind the pix.

  Here is the config - I can't determine why it does not work, we are desperate to get there as soon as POSSIBLE!

  We have the same problem with the customer 4.0.3(c)

  Thanks in advance for any help!

  =======================================

  AKCPIX00 # sh run

  : Saved

  :

  6.2 (3) version PIX

  ethernet0 nameif outside security0

  nameif ethernet1 inside the security100

  hostname AKCPIX00

  domain.com domain name

  fixup protocol ftp 21

  fixup protocol http 80

  fixup protocol h323 h225 1720

  fixup protocol h323 ras 1718-1719

  fixup protocol they 389

  fixup protocol rsh 514

  fixup protocol rtsp 554

  fixup protocol smtp 25

  fixup protocol sqlnet 1521

  fixup protocol sip 5060

  fixup protocol 2000 skinny

  fixup protocol sip udp 5060

  names of

  access-list 101 permit ip 192.168.1.0 255.255.255.0 10.0.0.0 255.255.255.0

  pager lines 24

  interface ethernet0 10baset

  interface ethernet1 10full

  Outside 1500 MTU

  Within 1500 MTU

  external IP address #. #. #. # 255.255.240.0

  IP address inside 192.168.1.5 255.255.255.0

  alarm action IP verification of information

  alarm action attack IP audit

  IP local pool akcpool 10.0.0.1 - 10.0.0.10

  history of PDM activate

  ARP timeout 14400

  Global 1 interface (outside)

  (Inside) NAT 0-list of access 101

  NAT (inside) 1 0.0.0.0 0.0.0.0 0 0

  Route outside 0.0.0.0 0.0.0.0 #. #. #. # 1

  Timeout xlate 03:00

  Timeout conn 01:00 half-closed 0: 10:00 udp 0:02:00 CPP 0: h323 from 10:00 0:05:00 sip 0:30:00 sip_media 0:02:00

  Timeout, uauth 0:05:00 absolute

  GANYMEDE + Protocol Ganymede + AAA-server

  RADIUS Protocol RADIUS AAA server

  AAA-server local LOCAL Protocol

  the ssh LOCAL console AAA authentication

  No snmp server location

  No snmp Server contact

  SNMP-Server Community public

  No trap to activate snmp Server

  enable floodguard

  Permitted connection ipsec sysopt

  No sysopt route dnat

  Crypto ipsec transform-set esp - esp-md5-hmac RIGHT

  Crypto-map dynamic dynmap 10 transform-set RIGHT

  map mymap 10-isakmp ipsec crypto dynamic dynmap

  mymap outside crypto map interface

  ISAKMP allows outside

  part of pre authentication ISAKMP policy 10

  encryption of ISAKMP policy 10

  ISAKMP policy 10 md5 hash

  10 2 ISAKMP policy group

  ISAKMP life duration strategy 10 86400

  vpngroup address akcpool pool akcgroup

  vpngroup dns 192.168.1.10 Server akcgroup

  vpngroup akcgroup by default-domain domain.com

  vpngroup split tunnel 101 akcgroup

  vpngroup idle 1800 akcgroup-time

  vpngroup password akcgroup *.

  vpngroup idle 1800 akc-time

  Telnet timeout 5

  SSH #. #. #. # 255.255.255.255 outside

  SSH timeout 15

  dhcpd address 192.168.1.100 - 192.168.1.130 inside

  dhcpd dns 192.168.1.10

  dhcpd lease 3600

  dhcpd ping_timeout 750

  dhcpd allow inside

  Terminal width 80

  Cryptochecksum:XXXXX

  : end

  AKCPIX00 #.

  Config looks good - just as domestic mine to my local network. The only thing I can think is that you may have entered commands in the wrong order - which means, you could have isakmp or encryption before the config map was complete. Write memory, then reloading the pix is a way to reset everything. If you do not want downtime:

  mymap outside crypto map interface

  ISAKMP allows outside

  Enter these two commands should be enough to reset the ipsec and isakmp.

• Cannot access some sites behind the pix515e

  I started my CISCO PIX 515e in July 2004 with a minimum configuration. The only change I made was to introduce the syslog and 3COM tftp server. Two weeks after my Internet (browsers) users (inside) began to have problems of access to certain sites for example google.com, cnn.com etc when I bypass the firewall, they can access all the sites. When I place them behind the firewall again they cannot access the same places. It seems to me that the firewall is the cause. This could be the cause?

  Without seeing your config, it is hard to say, but a proposal, I'd say you're probably out of translation addresses. The PIX must create a translation for the traffic as it comes out, and she does that based on nat/global orders, you have in there. Let's say you have the following:

  Global 1 200.1.1.1 - 200.1.1.254 (outside)

  NAT (inside) 1 0.0.0.0 0.0.0.0

  Then, this indicates the PIX to translate any internal address to 200.1.1.x he died. If all of these 254 global addresses be used however the next person who tries to go out will be denied. If you look at your syslog server, you will see a message like "Unable to create translation."

  If you change it above to:

  Global 1 200.1.1.1 - 200.1.1.253 (outside)

  Global 1 200.1.1.254 (outside)

  NAT (inside) 1 0.0.0.0 0.0.0.0

  then the first 253 users that come out will have their packages would NAT, then all of the other packages will be PAT had to the 200.1.1.254 address, giving you an extra 65, 000 - odd outbound connections.

  If that's not enough (remember that only the user going to a few web sites can open connections to 20-30), then you can change the above to the following:

  Global 1 200.1.1.1 - 200.1.1.252 (outside)

  Global 1 200.1.1.253 (outside)

  Global 1 200.1.1.254 (outside)

  NAT (inside) 1 0.0.0.0 0.0.0.0

  giving you a 65, 000 - odd additional translations and so on.

  Other than that, we would need to see your Setup and your messages to syslog (in the debug level) when these users can't get out.

• Cannot access page Plugin-based PDB (protein Data Base)

  OS: MacOS Yosemite 10.10.3. Cannot access the http://www.callutheran.edu/Academic_P.../lzipmast.htm Web page that uses a plugin of the PDB. I don't know if there are plugins for this format (s?), in FireFox, or anything else besides. Safari reports that "the sype file not specified", so maybe there is a mistake in the Web page itself (humor: "these biologists are sloppy with their microscopes to $5 million and more, but they don't know much about computers..")

  This page has not been modified since before that Firefox is a browser. There is probably a plugin for Internet Explorer v6 that will display that content. But you'll need a computer with Windows XP SP1 which is never updated Internet Explorer, and then find and install the plugin to make it work.

  You can download the file directly, if you want to try to find a program that will open its doors this: http://www.callutheran.edu/Academic_Programs/Departments/BioDev/omm/lzipper/pdbs/lzipdna1.pdb

• Firefox starts, but cannot access any website.same issue is experienced with Chrome, not Explorer

  Hello, I have a problem with surfing with Firefox. The browser starts but cannot access any Web site. The same question is experienced with Google Chrome. However, Internet Explorer works smoothly. Thank you

  Some problems occurs when your Internet security program has been implemented.
  trust the previous version of Firefox, but not more acknowledges your
  update as being approved. Now how do I solve the problem: to allow
  Firefox to connect to the Internet

  • Make sure your Internet security software is up-to-date (for example, you are using the latest version).
  • Delete Firefox to list your program of programs approved or recognized. For detailed instructions, see

  Configure the firewall so that Firefox can access the Internet. {web link}

• TypeError: Error #1009: cannot access a property or method of a null object reference?

  Mr President.
  I updated firefox and always this type of problem
  every time I tried to open the flash game site iam getting this question. sometimes IE browser cannot open it too much.
  "".... TypeError: Error #1009: cannot access a property or method of a null object reference.
  to ASGames / fun_Menu)
  to ASGames / frame2)
  at flash.display::MovieClip/gotoAndStop()
  to WeddingTianaDressup_fla::Timeline_102 / playGames ()... » »

  but the same site can be opened in other browsers in the same pc... but the same site a user goes to another computer on the browser firefox itself. How do not know where is the problem... ?
  so please, some can help hu?

  Dear Sir.
  Thanks for your answer...! I did what you said but it doesn't work. new iam having the same problem...!

• cannot access the internet after upgrading to firefox 30.0 on windows 7

  After the upgrade to firefox 30.0 on windows 7, cannot access the internet. FF 30.0 works OK under Vista

  Sometimes it's because of your security software thinking that the upgrade may not be legitimate. You can consult this article: problems connecting to websites after Firefox update.

• Cannot access Firefox shows the missing profile or inaccessible is there an easy solution?

  cannot access Firefox shows the missing profile or unreachable is there a solution I'm not a computer expert

  Hello d2burnett, tryp press windows key + R and open %appdata%\Mozilla\Firefox\ - then rename the file called profiles.ini to something like oldprofiles.ini...

• Facebook cannot access the photo library

  When I try (on a Macbook Pro) 'create album' or 'add photos' on the women's FB page, I can see, but cannot access its photo library.  Why?  I can, however, access the photos directory - unfortunately, uses Photo pictures are not stored there.   Apple told me that they no longer support iPhoto, but were instead switching to 'Photos '.  So that's where all the images are imported from the camera.  WTH?  It shouldn't be this difficult.

  When you use a web browser or any other application that uses the media browser, you can access your own library of Photos of system, but not of other libraries of Photos.  Only libraries can be designated as the library of the system at the same time.

  The photo library of the system will be available from the sidebar of the selector Panel of file like this:

  

• has sent that a gift of music to a friend in france Spain and friend album cannot access the gift

  Hi, I bought an album in itunes with a french account and sent to a friend with a Spanish account. It cannot access my gift.

  Generally gifts iTunes Store cannot be exchanged outside the country of issue.  Have your friend return the gift.

  iTunes: send gifts iTunes - http://support.apple.com/HT201783 - 'learning to send gifts iTunes from the iTunes Store, iBooks Store and App Store. In the iTunes Store, you can offer an amount in dollars or pounds, audio books, music, movies, TV shows or applications on your iPhone, iPod touch, iPad, Mac or PC. »

  "When you buy a gift from iTunes, you must have a credit card valid at the folder; You cannot buy an iTunes gift with in-store credit. If you use the sharing of family and ask to buy is activated on your account, you are unable to buy gifts. You cannot redeem gifts purchased outside the country of purchase. For example, an iTunes gift bought in France cannot be exchanged outside the France iTunes store. You can contact the Apple Support to cancel an iTunes gift until two days before the scheduled delivery. »

• Cannot access my Comcast mail since the last update. I can access it from Safari and Microsoft Windows, but generally do not either of these browsers use

  Cannot access my Comcast mail since the last update. I can access it from Safari and Microsoft Windows, but generally do not use either of these browsers. I chatted with Comcast and they are the ones who asked me to try to gain access to other browsers. And, as noted, I managed. Only my opening my email to Comcast.net inhibits the Firefox, the browser that I use on a regular basis because of this problem I can't use Firefox.

  The reset Firefox feature can solve a lot of problems in restaurant Firefox to its factory default condition while saving your vital information.
  Note: This will make you lose all the Extensions, open Web sites and preferences.

  To reset Firefox, perform the following steps:

  1. Go to Firefox > help > troubleshooting information.
  2. Click on the button 'Reset Firefox'.
  3. Firefox will close and reset. After Firefox is finished, it will display a window with the imported information. Click Finish.
  4. Firefox opens with all the default settings applied.

  Information can be found in the article Firefox Refresh - reset the settings and Add-ons .

  This solve your problems? Please report to us!

• 10 Windows cannot access ipod

  I recently used my pc to sync my ipod, upgraded to Win 10 and now the pc does not recognize the ipod, it says that the ipod is corrupted. Can I use the ipod, and I can use it in my car via USB.  Clearly, it's Windows 10.  I connect and get this message: "there is a problem with this drive, can and difficulty now ' when I tell Windows to analyze and correct, I get another message that says:" this disk check cannot be performed because Windows cannot access disc.  If I opened my file Explorer, then plug it in, I see pop up (the full name of it) and after 2 seconds, the screen to explore closes.  Can anyone help or is it just being a fascist again Microsoft?

  First of all, try this procedure to restart the Apple Mobile Device Service

  Restart the Service of Mobile Apple (AMDS) device on Windows - Apple Support

  If this does not help, you can completely remove iTunes and software components.  This Apple document lists all the components of an installation of iTunes and the precise order to uninstall

  Remove and reinstall iTunes and software for Windows 7 and later versions - Apple Support components

  Then, download and install the latest version of iTunes

  http://www.Apple.com/iTunes/

• Error: cannot access dead object

  [JavaScript application] Error: cannot access dead object.

  This message appears repeatedly after using Gmail, sign out, close the tab, then open a new tab.

  Uploadd disabling Drag & Drop appeared to be... on my 7 machine. Now for my Vista laptop. Thank you.