Welcome to ISAserver.org

VPN Clients have no External Port 80/443 Access

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> VPN Clients have no External Port 80/443 Access

Page: [1]

Message

<< Older Topic Newer Topic >>

VPN Clients have no External Port 80/443 Access - 10.Sep.2007 1:44:39 PM

whale

Posts: 8
Joined: 4.Nov.2003
From: St. Marys, PA
Status: offline

Greetings,
I am having an issue with allowing VPN Client to have access to the internet using ISA 2004. I have no issues with VPN Clients connecting to the internal network.

What I have done so far is to add the VPN Client to an existing rule that allows internal users port 80/443 access to the external network (internet). The Webproxy logs do not give any indication the the VPN Client computer is being blocked from internat access. I wonder if I need to setup a route from the VPN to the External network. Can you set me straight on what is necessary to allow VPN client access to the internet.

Post #: 1

Featured Links*

RE: VPN Clients have no External Port 80/443 Access - 11.Sep.2007 7:59:30 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

No routes are required. Just an Access Rule that allows VPN Clients Network access to the default External Network.

Make sure you create a Network Rule that sets a NAT relationship between the VPN Clients Network and the default External Network.

HTH,
Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to whale)

Post #: 2

RE: VPN Clients have no External Port 80/443 Access - 11.Sep.2007 6:19:17 PM

elmajdal

Posts: 5106
Joined: 16.Sep.2004
From: Lebanese in Kuwait
Status: online

Hi,

Also keep Tom's article in your Favorites : http://www.isaserver.org/tutorials/2004vpnclientnetaccess.html

_____________________________

Tarek Majdalani

MS Forefront Edge Security MVP
Website : http://www.elmajdal.net/ISAServer
New Section : http://www.elmajdal.net/Win2k8

(in reply to whale)

Post #: 3

RE: VPN Clients have no External Port 80/443 Access - 12.Sep.2007 7:12:07 AM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Tarek,

Thanks!

Tom

_____________________________

Thomas W Shinder, M.D.
Sr. Consultant/Technical Writer
Prowess Consulting http://www.prowessconsulting.com/
Blog: http://blogs.isaserver.org/shinder/

GET THE NEW ISA 2006 Book!: http://tinyurl.com/2gpoo8

(in reply to elmajdal)

Post #: 4