Re: VPN Problem

From: Brian Minier (brian_minier_at_no-spam.iisvr.com)
Date: 02/20/04 

Date: Fri, 20 Feb 2004 15:01:21 -0500

Well the computer in question was hooked up directly to 1 of our DSL
connections( for testing purposes), is a member of the domain and had me
logged (and during the times when I logged in locally or didn't supply my
information to the symantec enterprise vpn software, I was prompted to login
before I was able to access the server. Sadly too, the machine connected
did have a hardcoded WINS server. I wonder if maybe I hardcoded the DNS to
point to the server too?!

As far as bandwidth requirements, we're coming in on a line which has 512Kb
upstream so I would think with only 1 or at most 3-4 VPN connections it
should perform rather well. But than again I did not take into
consideration they bandwidth needed (do you have a guess) to do browsing?
To be honest though, as long as we can access programs and our SQL server I
shouldn't get too many complaints.

And to provide a little more information, I can always access the server
using \\server and if i've not yet supplied a correct name/password I get
prompted and log in. I've seen the SBS server logs and it looks good. When
I do type in \\server or browse to server, I can always see the little
microsoft logo in the upper right corner doing it's animated thing. BUT,
when I try to access a share on the server it does not do this and I have to
ctrl-alt-dlt and kill that explorer process.

Any more info you can provide? At this point, the firewall is actually not
much a firewall as I'm allowing all traffic in and out in hopes of making
the VPN work.
Thanks again 

--
Brian
"Phillip Windell" <@.> wrote in message
news:eEJKXB%239DHA.1268@TK2MSFTNGP12.phx.gbl...
> Network "browsing" requires a WINS server on the remote network that is
used
> by the client that "dials in".  It also requires the client be a member of
> the Domain or at least have the Workgroup name the same as the Domain
name.
> In my experience network browsing will never be dependable with VPN,...VPN
> is by nature slow, and network browsing requires considerable bandwidth.
So
> I have never seen it work 100% dependably even when everything is correct.
>
> As far as accessing resources, your client machine is probably not a
member
> of the Domain it is VPN'ing into so the user account you are logged into
the
> client with is not relevant to the remote network you are connecting to.
> Also keep in mind that the account the "Dialup Connectiod" used was to
> create the VPN link and I don't think it is relevant to accessing any
> resources.
>
> In all the VPN situations I've been in I get a credentials "popup" when I
> try to access remote resources and have always had to give it credentials.
I
> also had to prefix the user name with the remote Domainname
> (domainname\username) when presenting credentials.
>
> VPN seems to work more effieciently for Client-Server Applications (like
Web
> Browser vs Web Server) rather than accessing files & folders via the OS
and
> things like using Network Neighborhood or mapped drives.
>
> Those are my experiences with it anyway.
>
>
> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>
> "Brian Minier" <brian_minier@no-spam.iisvr.com> wrote in message
> news:ea6T2h89DHA.3648@TK2MSFTNGP11.phx.gbl...
> > Ok, I'm using Symantec VPN Client and I can successfully open a tunnel
to
> > the vpn gateway.  I can ping hosts behind the firewall and all that.
The
> > problem is, when I go to browse the network it is very unreliable.
> > Sometimes I can see all the computers, and can browse to our server
> (running
> > sbs 2003).  But I have yet to be able to access any of the server shares
> > even though I do log in.
> >
> > So, is this possible at all? To be able to run applications, file
sharing,
> > network browsing using a VPN gateway and a firewall? And second, if it
is,
> > what could be the issue preventing me from doing that?  Again, the VPN
> > connection is established and works.  It just seems to be an issue with
> the
> > windows components.  And yes, I have tried it with the File/Print
sharing
> > stuff checked and the firewall is not blocking any of the netbios stuff.
> > Any help would be much appreciated.
> >
> > Brian
> >
> >
>
>

Relevant Pages

  • Re: [Full-disclosure] Remote Desktop Command Fixation Attacks
    ... This set of steps is redundant in many places, and it's also enormously expensive, since you're using no less than three different expensive bits of networking hardware (AP, PIX, VPN Concentrator), in addition to a bunch of x86 server hardware, windows server licenses, and at least one ISA license. ... Your computers necessarily don't have full access to your network infrastructure when they aren't logged on, so GPOs, software updates, etc can't be applied at the times you want them to be applied. ... Turning on, enabling, and implementing every possible security setting and device you think of is not defence in depth, and will probably only have two effects - your users won't use your wireless network, and you'll burn so much cash you won't have any left to spend on *useful* security measures. ...
    (Full-Disclosure)
  • Re: VPN with SBS 2003 (not R2) and DSL.
    ... Reading property value for VPN returned OK ... Reading VPN Server Name returned OK ... identical network cards. ... it seems doubtful that SBS will work properly with two NICs ...
    (microsoft.public.windows.server.sbs)
  • RE: VPN Connection Problems
    ... Note that we are able to successfully VPN into the office. ... to browse the network, RDP to the server or even ping the server. ... > This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: VPN clients unable to connect to other resources.
    ... on the SBS 2003 server just not sure where to go for help on it. ... Next time I'm at my home PC, I'll VPN in and see what IP info I'm getting ... client PC on your LAN, you should be able to do so from a remote VPN client, ... get the network path was not found. ...
    (microsoft.public.windows.server.sbs)
  • Re: Slow speed through VPN tunnel
    ... In your position I might consider placing a terminal server in the core office and connecting to it with RWW or VPN from the remotes to take the load off the inter office connections. ... Consider badnwidth there is absolutely no difference in network speed if one ...
    (microsoft.public.windows.server.sbs)