[isalist] Re: VPN Client Connection Problem

  • From: Jim Harrison <Jim@xxxxxxxxxxxx>
  • To: "isalist@xxxxxxxxxxxxx" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 14 Jan 2008 18:06:43 -0800

http://www.ISAserver.org
-------------------------------------------------------

Can you include a couple of the log entries that indicate this traffic?
"VPN" is too vague; is this IPSec, PPTP, SSL-VPN..?

-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx] On 
Behalf Of Rob Moore
Sent: Monday, January 14, 2008 1:33 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] VPN Client Connection Problem

Hello all-

ISA 2006 Standard

Windows Server 2003

I've got an odd problem. I have a guy using a Mac trying to connect to my VPN 
server. (The VPN server is a Windows server running behind the ISA server. It's 
a PPTP VPN.) When he tries to connect, he gets this error message: "The 
connection was terminated by the communication device. Please verify your 
settings and try again". We've tried recreating his VPN connector. We've tried 
connecting wired and wireless and from several different locations. I've also 
successfully connected to the VPN server using his account but from different 
computers, both Mac and PC.

When I monitor my own successful connection attempt on the firewall, I get a 
single message that says the connection was initiated. When I monitor his 
unsuccessful connection attempt, I get three entries. First it says the 
connection was initiated. Then it says the connection was closed. Then I get a 
"Denied" entry in which it appears the ISA server is trying to send the request 
to the public IP address of the VPN server. The error is "0xc0040017 
FWX_E_TCP_NOT_SYN_PACKET_DROPPED."

I've tried Googling it and gotten a lot of stuff, some of it ISA related, some 
of it not. I also looked some in the archives of this list.

Can anyone point me in the right direction?

Thanks,

Rob

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

Rob Moore

Network Manager

215-241-7870

Help Desk: 800-500-AFSC

------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx

Other related posts: