RE: PPTP VPN client access on ISA 2004
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Wed, 16 Feb 2005 09:53:25 -0600
Hi MW,
Configure System Policy to accomplish this task.
Thanks for getting the book! :)
Tom
www.isaserver.org/shinder
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls
-----Original Message-----
From: MW [mailto:mark.wrightson@xxxxxxxxxxxxxxxx]
Sent: Wednesday, February 16, 2005 6:30 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] PPTP VPN client access on ISA 2004
http://www.ISAserver.org
Would like to move to ISA 2004 form ISA 2000. Busy testing / learning
(Using Toms book)
On ISA 2000 we allow L2TP and PPTP VPN client access. However we limit
the
PPTP access to a small number of users where we have NAT-T issues. To
make
them more secure we disable the default filters that allow PPTP access
from all external addresses . Then we ceate filters that allow PPTP
access
only from the IP addresses of our PPTP users (we make the get a fixed IP
address from the ISP).
We can't seem to do the same in ISA 2004. When we allow PPTP VPN client
access the system policy allows access from all external addresses.
Doesn't seem to be any way of disabling this so we can ceate our own
rule
Any ideas how I can get this to work
MW
(Am looking at certificate based EAP-TLS for PPTP access as an
alternative
but have problem - will post another query)
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
