RE: Would AV plugin stop VPN infections?
- From: "Thomas W Shinder" <tshinder@xxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 18 Aug 2003 11:38:47 -0500
Hi Steve and William,
The VPN Quarantine feature is something you get with the Win2003 VPN
service. You can use it to "pre-qualify" your VPN clients before
allowing them access into your network. Once they pass the
pre-qualification process (have AV software installed,
anti-spyware/scumware software installed, have the appropraiate SPs and
hotfixes installed, etc), then they are allowed access to the network.
Very cool stuff. I'm hoping I'll be able to get an ISA Server 2000 VPN
Quarantine Kit together in the future. You could have even checked for
the Blaster registry entries on the VPN clients before letting them in,
IIRC.
For more info, check out www.microsoft.com/vpn They have some stuff
there on the subject, and I'll be writing more about it in the near
future.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp>
-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Monday, August 18, 2003 11:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Would AV plugin stop VPN infections?
http://www.ISAserver.org
Ok Dr Shinder, can you elaborate on VPN Quarantine...:))
Steve
_____
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, August 18, 2003 11:00 AM
To: [ISAserver.org Discussion List]
http://www.ISAserver.org
Hi William,
ISA firewalls don't inspect VPN traffic, as its LAT traffic.
However, if you have Windows Server 2003 based ISA firewalls, then you
can use the VPN Quarantine to get what you want accomplish.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp>
Other related posts:
