RE: Outbound VPN connections from internal clients
- From: Christian.Schramm@xxxxxxxxxxxxxx
- To: isalist@xxxxxxxxxxxxx
- Date: Tue, 24 Jun 2003 12:08:57 +0200
OK, after the second reading I finally got it :-))
"You might have already tried this and found the VPN clients can't connect
to the Internet through the ISA Server. The reason for this is that the VPN
clients cannot act as SecureNAT clients. There is no way for you to
configure the VPN client to use the internal interface of the ISA Server as
its default gateway. The default gateway is already set when the VPN client
connects and its clearly not the ISA Server's internal interface. While the
details are a bit more complex than this, the fact remains that there is no
solution to this problem; you will never make the VPN client a SecureNAT
client."
Thanks Tom!
> -----Ursprüngliche Nachricht-----
> Von: Christian.Schramm@xxxxxxxxxxxxxx
> [mailto:Christian.Schramm@xxxxxxxxxxxxxx]
> Gesendet: Dienstag, 24. Juni 2003 11:26
> An: [ISAserver.org Discussion List]
> Betreff: [isalist] RE: Outbound VPN connections from internal clients
>
>
> http://www.ISAserver.org
>
>
> Thanks Tom,
>
> But I just wanted to hear a yes or no ;-) short question,
> short answer! The reason why, is when the clients habe to be
> SecureNAT I don't read anymore of those articles beacause I
> definitely have no SecureNAT clients and will never have ...
>
> Greetings
> Christian
>
> > -----Ursprüngliche Nachricht-----
> > Von: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
> > Gesendet: Montag, 23. Juni 2003 14:47
> > An: [ISAserver.org Discussion List]
> > Betreff: [isalist] RE: Outbound VPN connections from
> internal clients
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Hi Christian,
> >
> > Check out:
> >
> > http://www.isaserver.org/tutorials/vpnclientsecurity2.html
> >
> > http://www.isaserver.org/tutorials/vpndmz.html
> >
> > http://www.isaserver.org/tutorials/trihomedwirelessdmz.html
> >
> >
> > HTH,
> > Tom
> >
> > Thomas W Shinder
> > www.isaserver.org/shinder
> > ISA Server and Beyond: http://tinyurl.com/1jq1
> > Configuring ISA Server: http://tinyurl.com/1llp
> >
> >
> >
> >
> > -----Original Message-----
> > From: Christian.Schramm@xxxxxxxxxxxxxx
> > [mailto:Christian.Schramm@xxxxxxxxxxxxxx]
> > Sent: Monday, June 23, 2003 5:29 AM
> > To: [ISAserver.org Discussion List]
> > Subject: [isalist] Outbound VPN connections from internal clients
> >
> >
> > http://www.ISAserver.org
> >
> >
> > Hi all..
> >
> > Short question for you: Does a VPN client have to be a
> > SecureNAT client to establish a VPN connection from internal
> > to an external VPN gateway / VPN host?
> >
> > Greets
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory:
> > http://www.serverfiles.com No.1 Exchange > Server Resource
> > Site: http://www.msexchange.org Windows Security Resource
> > Site: http://www.windowsecurity.com/ Network Security
> > Library: http://www.secinf.net/ Windows 2000/NT Fax
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: tshinder@xxxxxxxxxxxxxxxxxx To unsubscribe send a
> > blank email to $subst('Email.Unsub')
> >
> > ------------------------------------------------------
> > List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> > ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> > ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> > ------------------------------------------------------
> > Other Internet Software Marketing Sites:
> > Leading Network Software Directory:
> > http://www.serverfiles.com No.1 Exchange > Server Resource
> > Site: http://www.msexchange.org Windows Security Resource
> > Site: http://www.windowsecurity.com/ Network Security
> > Library: http://www.secinf.net/ Windows 2000/NT Fax
> > Solutions: http://www.ntfaxfaq.com
> > ------------------------------------------------------
> > You are currently subscribed to this ISAserver.org Discussion
> > List as: christian.schramm@xxxxxxxxxxxxxx To unsubscribe send
> > a blank email to $subst('Email.Unsub')
> >
>
> ------------------------------------------------------
> List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
> ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
> ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
> ------------------------------------------------------
> Other Internet Software Marketing Sites:
> Leading Network Software Directory: http://www.serverfiles.com
> No.1 Exchange Server Resource Site: http://www.msexchange.org
> Windows Security Resource Site: http://www.windowsecurity.com/
> Network Security Library: http://www.secinf.net/
> Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
> ------------------------------------------------------
> You are currently subscribed to this ISAserver.org Discussion
> List as: christian.schramm@xxxxxxxxxxxxxx
> To unsubscribe send a blank email to
> $subst('Email.Unsub')
>
Other related posts:
