Re: Outgoing VPN Error 619

1. Outbound VPN is not "supposed" to ever be allowed.

2. The Web Proxy and Winsock Proxying services only "proxy" TCP or UDP based
traffic. They will not, and will never do, GRE/PPTP

3. Only the SecureNAT Service and do GRE/PPTP.
a. So the Clients have to be SecureNAT Clients.
b. The Access Rules for them must be "anonymous"
c. In some cases the Private IP# Range of the remote network being
contacted
may have to be added to the Internal Network Definition


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/ISA2004_AccessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/download/9/1/8/918ed2d3-71d0-40ed-8e6d-fd6eeb6cfa07/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.mspx

Microsoft ISA Server Partners: Partner Hardware Solutions
http://www.microsoft.com/forefront/edgesecurity/partners/hardwarepartners.mspx
-----------------------------------------------------

"Damon" <enlighten@xxxxxxxxxxxxxxxxx> wrote in message
news:uu3NV8yoIHA.2208@xxxxxxxxxxxxxxxxxxxxxxx
Hi I'm getting the following error when trying to establish out going
VPN's on ISA 2006:

Error 619: A connection to the remote computer could not be established,
so the port used for this connection was closed. For further assistance,
click More Info or search Help and Support Centre for this error number.

I have a rule allowing all outbound traffic and the PPTP filter is
enabled. Anyone know what I can do to get outbound VPN's working?

Cheers

Damon





.

Relevant Pages

  • RE: Unable to print on ports 9100/515
    ... Is the protocol definition for outbound on port 9100 and 515 actually trying ... > the detailed steps to publish a TCP/IP network printer through ISA, ... > 306071 How to Publish a TCP/IP Printer Behind ISA Server ...
    (microsoft.public.windows.server.sbs)
  • Re: ISA server and Gibsons LeakTest
    ... So ISA server seems to allow outbound http ... Is my configuration wrong or ISA server can't ... Leak tests are trojan prototypes that demonstrate potential ways ... personal firewalls are limited at least when it comes to protecting ...
    (comp.security.firewalls)
  • Re: Question about ISA port forwarding
    ... One final thing is it possible for IAS to Send outbound on the published ... Microsoft Internet Security & Acceleration Server: Partners ... Microsoft ISA Server Partners: Partner Hardware Solutions ...
    (microsoft.public.isa.configuration)
  • ISA server and Gibsons LeakTest
    ... I run ISA Server SP1 server on win2k and my "IP Packet Filters rules" ... explicitly declared that only Outbound DYNAMIC TCP and UDP traffic is ... So ISA server seems to allow outbound http ... My first question is what "Dynamic" stands for as far as outbound ...
    (comp.security.firewalls)
  • Re: Open port
    ... "Inbound" is for server publishing when a NAT relationship exists between ... Inbound for publishing rules, outbound for access rules ... How to open specific port? ...
    (microsoft.public.isa.configuration)