RE: ISA 2000 & VPN

  • From: Paul Crisp <PCrisp@xxxxxxxxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 16 Aug 2004 16:41:13 +0100

Well I knew if my heart that ISA would never be at fault Tom ;)
 
I am now ordering a new DSL Router and DSL Modem that can support multiple
VPN tunnels. Damn manufacturers for not specifiy you can only have 1 VPN
tunnel !!!

Paul Crisp
Snr Network Support Analyst
t: 020 7 827 5201
f: 020 7 827 5266

-----Original Message-----
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxx] 
Sent: Monday, August 16, 2004 4:36 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2000 & VPN
Importance: High

http://www.ISAserver.org

Hi Ray,

Exactly. I've run into the "ISA broke XYZ with my VPN" and it turns out
the crudware $35 Linsys was the core of the problem. The ISA firewall
will support 1000 simultaneous VPN connections (SE, EE will be unlimited
I think).


Tom
www.isaserver.org/shinder
Get the book!
Tom and Deb Shinder's Configuring ISA Server 2004
http://tinyurl.com/3xqb7
MVP -- ISA Firewalls



-----Original Message-----
From: Ray [mailto:rdzek@xxxxxxxxxxxxxxx] 
Sent: Monday, August 16, 2004 9:19 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: ISA 2000 & VPN


http://www.ISAserver.org

I would look closely at your DSL router.  One of the little nasty
secrets of
dsl routers is that while they support pptp pass-through, they don't say
anywhere in their documentaion how many encrypted tunnels they can
handle.
We recently experienced this problem at a conference were we were using
a
universities network to establish a sort of WAN back to our offices.  We
had
several machines behind a DSL router to give us some seperation from the
UC
network.  We were just VPN'ing from the individual PC's we were using
for
registration, inventory, etc back to our ISA 2000.  We had a very hard
time
getting anymore than 3 PC's to connect at a time.  I switch to a from a
D-link to a Linksys and it worked fine.

If you need to keep multiple machines all connected, you may think about
placing a isa 2004 box at the far end and let that be your router.  That
was
the direction we were headed, but we simply ran out of time and had to
go
with the dsl router.  Since it was a temporary need, it worked fine.
But in
the future I think the isa 2004 box would have been more robust.


Ray Dzek
Network Operations Supervisor
Specialized Bicycle Components
PH:  408-782-5420
FX:  408-782-5421 

-----Original Message-----
From: Paul Crisp [mailto:PCrisp@xxxxxxxxxxxxxxxxx] 
Sent: Monday, August 16, 2004 5:41 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] ISA 2000 & VPN


http://www.ISAserver.org

Can someone answer this for me?

Can ISA 2000 accept multiple VPN connections from the same IP or same
MAC
address ?

I am trying to pinpoint where my problem is. I have mutiple people
VPN'ing
into our system without a problem, accept for two machines. I basically
have
a warehouse where we have two PC's connected to an ADSL router and only
one
machine will ever connect to the VPN. The other either times-out saying
'the
server did not respond in a timely fashion' or just does not find the
ISA
server at all. Both machines can browse the Internet fine !

Paul Crisp
Snr Network Support Analyst
t: 020 7 827 5201
f: 020 7 827 5266


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com Leading
Network Software Directory: http://www.serverfiles.com No.1 Exchange
Server
Resource Site: http://www.msexchange.org Windows Security Resource Site:
http://www.windowsecurity.com/ Network Security Library:
http://www.secinf.net/ Windows 2000/NT Fax Solutions:
http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
rdzek@xxxxxxxxxxxxxxx To unsubscribe visit
http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
tshinder@xxxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
World of Windows Networking: http://www.windowsnetworking.com
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
pcrisp@xxxxxxxxxxxxxxxxx
To unsubscribe visit http://www.webelists.com/cgi/lyris.pl?enter=isalist
Report abuse to listadmin@xxxxxxxxxxxxx


Other related posts: