Welcome to ISAserver.org

PPTP - unable to get through ISA 2004

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> SecureNAT Client >> PPTP - unable to get through ISA 2004

Page: [1]

Message

<< Older Topic Newer Topic >>

PPTP - unable to get through ISA 2004 - 12.Feb.2007 4:23:04 PM

drewg181

Posts: 40
Joined: 12.Jul.2001
From: Terre Haute, IN, USA
Status: offline

Urgh.... I take a XP SP2 client outside my ISA 2004 protected LAN and I can connect to my target VPN (an external resource) with no problem. I put the same box behind the ISA 2004 firewall and I get a 651 error. I am connecting PPTP. I have an outbound Access rule allowing all protocols (except SMTP and SMTPS) for all users on tne internal network to the external network.

I can "telnet vpn.name.edu 1723" from inside the protected network with no problems, so that tells me port 1723 is making it out and back in. What other ports do I need to allow, or how can I tell when I establish a successful connection?.

All my clients behind the ISA server are SecureNAT, I do not install the firewall client on any PC.

What is interesting is that the address I use in the VPN connection wizard is not the same as what shows up when I do connect - it seems as if the connection request is handed off to another computer to make the actual connection. Is that throwing things off?

What am I missing?

< Message edited by drewg181 -- 12.Feb.2007 4:25:34 PM >

Post #: 1

Featured Links*

RE: PPTP - unable to get through ISA 2004 - 15.Apr.2007 12:39:04 PM

tshinder

Posts: 47490
Joined: 10.Jan.2001
From: Texas
Status: offline

Are there any NAT devices between the ISA Firewall and the destination VPN server?

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to drewg181)

Post #: 2