We have a VPN Master (NW5.1sp8, BM3.8 fully patched) and a VPN Slave
(NW6.5sp5, BM3.8 fully patched) on a site to site tunnel.

There are ftp issues at the slave site.

Users can't ftp out - kind of. They can reach a site by using the following
address, for example:


Where the first IP address is the destination site and the second IP address
is our MAster VPN Internal IP address. (This doesn't work at all with some

I have ftp proxy set on the slave server and the same access rules and
filters as on the master.

Why can't my users ftp straight to the site? And why can't they get to all
sites? Thanks!