Kerio Control forwards Service Discovery protocols between networks. This allows remote users across VPN tunnels or other networks to locate and reach devices (printers, Apple TV, and so on) that host services behind the firewall.
If you have more Kerio Controls connected through the Kerio VPN tunnel, all Kerio Controls must have enabled Service Discovery forwarding. Also, all network devices in your network (switches, routers, and modems) must support multicast forwarding.
Examples of Service Discovery protocols include:
- mDNS, which is used by Apple Bonjour for locating Apple services, or devices such as printers (Bonjour Gateway)
- NetBIOS Name service, which is used to identify Microsoft Windows workstations, servers, and services
- SSDP, which is used by devices and applications supporting UPnP
Kerio Control supports Service Discovery forwarding only for Kerio VPN.
IPsec VPN is not supported.
Configuring Service Discovery forwarding
To enable Service Discovery forwarding and to select subnets:
- In the administration interface, go to Security Settings > Zero-configuration Networking.
- Select Enable Service Discovery forwarding.
- Select the interfaces (subnets) for which you want to enable Service Discovery forwarding.
- Click Apply.
Kerio Control makes zero-configuration devices accessible in the selected interfaces.
If you have trouble with service discovery forwarding, verify that the firewall is set properly on the client computers.
In Windows Firewall, we recommend creating inbound and outbound rules to allow traffic on ports
138 for any remote interface even if you disable Windows Firewall.
If you use Kerio Control VPN Client, the NetBIOS interface is disabled by default. To enable NetBIOS:
- In your network connections, right-click Kerio Virtual Network and click Properties.
- Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
- Click Advanced.
- On the WINS tab, select option Enable NetBIOS over TCP/IP.
- Save your settings.