Welcome to ISAserver.org

ISA to IAG site to site vpn

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 General] >> Installation and Planning >> ISA to IAG site to site vpn

Page: [1]

Message

<< Older Topic Newer Topic >>

ISA to IAG site to site vpn - 6.Jul.2008 9:34:00 PM

otter

Posts: 1
Joined: 6.Jul.2008
Status: offline

We have a new branch office coming on line and I want to create a site to site VPN utilizing our IAG and our older ISA 2004 box. The IAG box is currently being used for perimeter security and ssl vpn for remote users. Since I already have an ISA box that I can use, I would like to create a site to site vpn with the IAG box. I have found some information discouraging the site to site vpn to an IAG but I don't know why. I can provide more information and I could really use some help if anyone has any experience with this type of setup. THANKS!

Post #: 1

Featured Links*

RE: ISA to IAG site to site vpn - 15.Jul.2008 8:17:25 AM

tshinder

Posts: 47180
Joined: 10.Jan.2001
From: Texas
Status: online

Yes, I would NEVER use the IAG for a site to site VPN. The IAG is designed as a secure remote access solution using SSL VPN and the ISA instance on it was designed to support the IAG configuration. Once you move outside the IAG configuration, you move outside the design spec of the IAG box.

Will it work? Probably. Will MS support you? Probably. Is it the smart or secure thing to do? I don't think so. Use a dedicated ISA firewall or just RRAS on another box for the site to site VPN.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to otter)

Post #: 2