Hi Mark, if the VPN protocol is not IPSec NAT-T or PPTP based you are out of luck because IP packet filters will not give you outbound access for LAT to non-LAT traffic. HTH, Stefaan -----Original Message----- From: Mark Hippenstiel [mailto:M.Hippenstiel@xxxxxxxxxxxx] Sent: dinsdag 2 september 2003 23:19 To: [ISAserver.org Discussion List] Subject: [isalist] RE: Novell Bordermanager VPN client http://www.ISAserver.org Hi Stefaan, Ha! I've seen this article before - what get's me is Novell's documentation: they say that I'd have to allow IP protocol number 57. Which is related to a thingy called SKIP... I might be far off the line here, but if I need a custom IP protocol enabled, I'd have to do this with packet filtering, yes? Wouldn't that mean that I could only use the Bordermanager client from within the DMZ? Or, put another way, packet filtering relies on normal IP routing functionality, so I couldn't possibly enter an internal network address in a packet filtering rule, right? Thanks, Mark > -----Original Message----- > From: Stefaan Pouseele [mailto:stefaan.pouseele@xxxxxxx] > Sent: Tuesday, September 02, 2003 8:26 PM > To: [ISAserver.org Discussion List] > Subject: [isalist] RE: Novell Bordermanager VPN client > > > Hi Mark, > > I haven't, but you can use my article > http://www.isaserver.org/articles/IPSec_Passth> rough.html as > baseline ;-) > > HTH, > Stefaan > > -----Original Message----- > From: Mark Hippenstiel [mailto:M.Hippenstiel@xxxxxxxxxxxx] > Sent: dinsdag 2 september 2003 20:21 > To: [ISAserver.org Discussion List] > Subject: [isalist] Novell Bordermanager VPN client > > http://www.ISAserver.org Hi, Has anybody eventually happened to use this VPN behind ISA? Thanks Mark ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: stefaan.pouseele@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub') ------------------------------------------------------ List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ ------------------------------------------------------ Other Internet Software Marketing Sites: Leading Network Software Directory: http://www.serverfiles.com No.1 Exchange Server Resource Site: http://www.msexchange.org Windows Security Resource Site: http://www.windowsecurity.com/ Network Security Library: http://www.secinf.net/ Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com ------------------------------------------------------ You are currently subscribed to this ISAserver.org Discussion List as: stefaan.pouseele@xxxxxxx To unsubscribe send a blank email to $subst('Email.Unsub')