RE: Would AV plugin stop VPN infections?
- From: "Dan Bartley" <bartleyd@xxxxxxxxxxxxxxxxxxx>
- To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 18 Aug 2003 12:46:30 -0400
I have definitely got to start reading more in depth in my Win2k3
installs. That feature got completely by me, bad Dan.
Best Regards,
Dan Bartley
_____
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, August 18, 2003 12:39
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Would AV plugin stop VPN infections?
http://www.ISAserver.org
Hi Steve and William,
The VPN Quarantine feature is something you get with the Win2003 VPN
service. You can use it to "pre-qualify" your VPN clients before
allowing them access into your network. Once they pass the
pre-qualification process (have AV software installed,
anti-spyware/scumware software installed, have the appropraiate SPs and
hotfixes installed, etc), then they are allowed access to the network.
Very cool stuff. I'm hoping I'll be able to get an ISA Server 2000 VPN
Quarantine Kit together in the future. You could have even checked for
the Blaster registry entries on the VPN clients before letting them in,
IIRC.
For more info, check out www.microsoft.com/vpn They have some stuff
there on the subject, and I'll be writing more about it in the near
future.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp>
-----Original Message-----
From: Steve Moffat [mailto:steve@xxxxxxxxxxxxxxxxxxxxxxxxxx]
Sent: Monday, August 18, 2003 11:14 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: Would AV plugin stop VPN infections?
http://www.ISAserver.org
Ok Dr Shinder, can you elaborate on VPN Quarantine...:))
Steve
_____
From: Thomas W Shinder [mailto:tshinder@xxxxxxxxxxxxxxxxxx]
Sent: Monday, August 18, 2003 11:00 AM
To: [ISAserver.org Discussion List]
http://www.ISAserver.org
Hi William,
ISA firewalls don't inspect VPN traffic, as its LAT traffic.
However, if you have Windows Server 2003 based ISA firewalls, then you
can use the VPN Quarantine to get what you want accomplish.
HTH,
Tom
Thomas W Shinder
www.isaserver.org/shinder <http://www.isaserver.org/shinder>
ISA Server and Beyond: http://tinyurl.com/1jq1
Configuring ISA Server: http://tinyurl.com/1llp
<http://tinyurl.com/1llp>
------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
bartleyd@xxxxxxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')
Other related posts:
