Welcome to ISAserver.org

Is it possible to configure Remote VPN on isa server which is not a domain member

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Is it possible to configure Remote VPN on isa server which is not a domain member

Page: [1]

Message

<< Older Topic Newer Topic >>

Is it possible to configure Remote VPN on isa server wh... - 18.Jul.2008 3:25:41 PM

bhavin78

Posts: 428
Joined: 18.Jul.2005
From: USA
Status: offline

Is it possible to configure Remote VPN on isa server which is not a domain member?
I was able to configure remote vpn but when I try to connect, I get access denied error?

I can join the isa server to domain but, I want to try without making isa server domain member.

Post #: 1

Featured Links*

RE: Is it possible to configure Remote VPN on isa serve... - 18.Jul.2008 7:31:48 PM

Jason Jones

Posts: 1931
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Think so using local accounts for authentication, but not used this setup myself...

Personally I would join ISA to the domain for lots of other good reasons, not just for VPN...you know you want to really!

Cheers

JJ

_____________________________

Jason Jones
Microsoft MVP (Forefront Edge Security)

Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/

Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)

Post #: 2

RE: Is it possible to configure Remote VPN on isa serve... - 20.Jul.2008 9:31:00 AM

justmee

Posts: 503
Joined: 14.May2007
Status: offline

quote:

Is it possible to configure Remote VPN on isa server which is not a domain member?

Yes,
Your scenario may be described here:
http://technet.microsoft.com/en-us/library/cc713343.aspx
Regards,
J

(in reply to Jason Jones)

Post #: 3

RE: Is it possible to configure Remote VPN on isa serve... - 21.Jul.2008 8:19:18 AM

paulo.oliveira

Posts: 721
Joined: 3.Jan.2008
From: Amazonas, Brazil
Status: offline

Hi,

here maybe are some reasons that Jason said: Debunking the Myth that the ISA Firewall Should Not be a Domain Member

Regards,
Paulo Oliveira.
[link=http://www.isaserver.org/tutorials/Debunking-Myth-that-ISA-Firewall-Should-Not-Domain-Member.html][/link]

(in reply to bhavin78)

Post #: 4

RE: Is it possible to configure Remote VPN on isa serve... - 29.Jul.2008 8:57:52 AM

bhavin78

Posts: 428
Joined: 18.Jul.2005
From: USA
Status: offline

quote:

ORIGINAL: Jason Jones

Think so using local accounts for authentication, but not used this setup myself...

Personally I would join ISA to the domain for lots of other good reasons, not just for VPN...you know you want to really!

Cheers

JJ

Local accounts worked.
why I cannot use LDAP for authentication?

(in reply to Jason Jones)

Post #: 5

RE: Is it possible to configure Remote VPN on isa serve... - 29.Jul.2008 10:32:30 AM

Jason Jones

Posts: 1931
Joined: 30.Jul.2002
From: United Kingdom
Status: offline

Only supported for web publishing IIRC

_____________________________

Jason Jones
Microsoft MVP (Forefront Edge Security)

Silversands Ltd
http://www.silversands.co.uk
View My Blog: http://blog.msfirewall.org.uk/

Get Our NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to bhavin78)

Post #: 6

RE: Is it possible to configure Remote VPN on isa serve... - 29.Jul.2008 10:43:30 AM

justmee

Posts: 503
Joined: 14.May2007
Status: offline

Because is not available.

If you would have read the RADIUS authentication link I've posted you may had found a more scalable solution, a "basic" authentication method supported by many VPN servers.
If you do not make ISA a domain member, and use IAS active directory integrated, you loose ISA's capability of creating group-based firewall access rules for your VPN clients. User mapping won't help you, 'cause there is nothing to mapped to.
Anyway, you would not be concern with local users on ISA and groups, this might work if would have a couple of users only. Not sure if this practice is supported/recommended by Microsoft in a production environment.
J

(in reply to bhavin78)

Post #: 7