Re: Conecting to an external VPN

Hi.. thanks for answering..

I'm still unable to connect behind ISA...

Just for testing, the first rule in my ISA server now is to allow all
traffic from all networks to all networks and for All users.. Do I have to do
something to indicate that I also mean anonimous users??

The client I'm using doesnt have any firewall client installed, windows
firewall is disables, and I don't have any other firewall.. The default
gateway is poiting to my ISA server's internal NIC, so I suposse this makes
it a SecureNAT

Still something is missing, coz the same VPN connects if I don't make this
client pass through the ISA server.. any ideas???

"Phillip Windell" wrote:

"averied" <averied@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:D14D7CD2-31A8-4D09-9BD0-746FFF2DE3E7@xxxxxxxxxxxxxxxx
The problem is that we need to connect to this external VPN as it is one of
our customers, so I can enable and take this risk only when we make the
connection. So.. my question, is there anyway to enable this anonymous
access in ISA server??..

In an Access Rule, using "All Users" = "anonymous"

The Client machine must be running as a SecureNAT Client. This means the routing
path leasds to the ISA. In a single subnet LAN this usually means the ISA is the
client's Default Gateway. If the client already has the Firewall Client
software installed, then it is a Firewall (Winsock) Client already and not a
SecureNAT Client,...so the user will have to temporarily disable the Firewall
Client during the VPN session by right-clicking the icon by the clock.

In DSL routers there is a option to allow L2TP IPsec
passthrough...

No, that has nothing to do with this.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft, or
anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------



.

Relevant Pages

  • Re: CEICW fails - several errors
    ... The firewall isn't used when ISA is installed. ... On the WAN NIC of your server the DNS has to point to the LAN IP. ... I immediately checked and ISA Server ...
    (microsoft.public.windows.server.sbs)
  • RE: Force use of ISA Firewall Client
    ... the Firewall client automatically sends user credentials ... or the user account must be mirrored on the ISA 2004 firewall. ... Firewall Client will result in usernames being included in the ISA logs, ... But if you visit Websites or FTP, the web proxy has improved performance. ...
    (microsoft.public.windows.server.sbs)
  • RE: Force use of ISA Firewall Client
    ... the Firewall client automatically sends user credentials ... or the user account must be mirrored on the ISA 2004 firewall. ... But if you visit Websites or FTP, the web proxy has improved performance. ...
    (microsoft.public.windows.server.sbs)
  • RE: OWA page not displayed Outside
    ... Open ISA 2006 management console. ... Expand the server node and highlight 'Monitoring'. ... Click 'Configure Firewall Logging'. ... |> internal client as both the web proxy client and firewall client? ...
    (microsoft.public.windows.server.sbs)
  • Re: Frustrated setting up Cisco VPN through ISA 2004
    ... to authenticate with ISA server, the other VPN do not work without ISA ... the ISA server 2004 on SBS 2003 not allows anonymous outbound ... The SecureNAT client unable to provide credential to ISA server, ... but ISA firewall client can. ...
    (microsoft.public.windows.server.sbs)
Loading