Welcome to ISAserver.org

Site-to-site VPNs dropping randomly

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA 2006 Firewall] >> VPN >> Site-to-site VPNs dropping randomly

Page: [1]

Message

<< Older Topic Newer Topic >>

Site-to-site VPNs dropping randomly - 20.Feb.2007 5:34:42 PM

phippsinc

Posts: 19
Joined: 15.Sep.2006
Status: offline

I have recently replaced ISA 2004 with ISA 2006. I have 3 site-to-site vpns (not to ISA servers) using ipsec.

Ever since the switch to ISA 2006, each of the vpns drops throughout the day randomly with no discernable pattern. As I look at the monitor program I use, one of the vpns has been up 21 minutes, 1 up 5 hours, 1 up 1 hour.

Downtime varies from one minute up to around 20 minutes.

This is driving my users crazy. Can anyone suggest a course of action to trouble-shoot this situation.

It did NOT happend with ISA 2004 -- yeah, I suppose I could go back, but that's another story.

Post #: 1

Featured Links*

RE: Site-to-site VPNs dropping randomly - 1.Mar.2007 3:16:07 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

If the ISA Firewall is not terminating any of these site to site VPNs, how would it have any effect on the tunnels?

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to phippsinc)

Post #: 2

RE: Site-to-site VPNs dropping randomly - 2.Mar.2007 6:48:52 PM

phippsinc

Posts: 19
Joined: 15.Sep.2006
Status: offline

The "near" end of the vpn terminates in ISA 2006. The far end are NOT ISA machines.

I finally bit the bullet and contacted msoft. They have a newer ipsec.sys which solved my problem. So the bottom line: if you use ISA 2006 with site-to-site vpns using ipsec, contact msoft to get the newer ipsec.sys.

(in reply to phippsinc)

Post #: 3

RE: Site-to-site VPNs dropping randomly - 3.Mar.2007 8:12:59 AM

Mr_Logic

Posts: 32
Joined: 15.Jun.2004
Status: offline

Hi there,

When you contacted MS Support, which route did you take? I am loathe to raise a request via their web site because of the risk of being charged.

Any chance you could email me that file because I appear to be having a similar problem.

Cheers muchly :)

(in reply to phippsinc)

Post #: 4

RE: Site-to-site VPNs dropping randomly - 3.Mar.2007 12:17:31 PM

tshinder

Posts: 47659
Joined: 10.Jan.2001
From: Texas
Status: offline

quote:

ORIGINAL: phippsinc

The "near" end of the vpn terminates in ISA 2006. The far end are NOT ISA machines.

I finally bit the bullet and contacted msoft. They have a newer ipsec.sys which solved my problem. So the bottom line: if you use ISA 2006 with site-to-site vpns using ipsec, contact msoft to get the newer ipsec.sys.

OH! That's different. Yes, you can call PSS for free and get the IPSec update.

Thanks!
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to phippsinc)

Post #: 5

RE: Site-to-site VPNs dropping randomly - 5.Mar.2007 9:22:11 AM