Is it possible to configure Remote VPN on isa server which is not a domain member (Full Version)

All Forums >> [ISA 2006 Firewall] >> VPN



Message

bhavin78 -> Is it possible to configure Remote VPN on isa server which is not a domain member (18.Jul.2008 3:25:41 PM)

Is it possible to configure Remote VPN on isa server which is not a domain member?
I was able to configure remote vpn but when I try to connect, I get access denied error?

I can join the isa server to domain but, I want to try without making isa server domain member.



Jason Jones -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (18.Jul.2008 7:31:48 PM)

Think so using local accounts for authentication, but not used this setup myself...[8|]

Personally I would join ISA to the domain for lots of other good reasons, not just for VPN...you know you want to really![8D]

Cheers

JJ



justmee -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (20.Jul.2008 9:31:00 AM)

quote:

Is it possible to configure Remote VPN on isa server which is not a domain member?

Yes,
Your scenario may be described here:
http://technet.microsoft.com/en-us/library/cc713343.aspx
Regards,
J



paulo.oliveira -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (21.Jul.2008 8:19:18 AM)

Hi,

here maybe are some reasons that Jason said: Debunking the Myth that the ISA Firewall Should Not be a Domain Member [8D]

Regards,
Paulo Oliveira.
[link=http://www.isaserver.org/tutorials/Debunking-Myth-that-ISA-Firewall-Should-Not-Domain-Member.html][/link]



bhavin78 -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (29.Jul.2008 8:57:52 AM)

quote:

ORIGINAL: Jason Jones

Think so using local accounts for authentication, but not used this setup myself...[8|]

Personally I would join ISA to the domain for lots of other good reasons, not just for VPN...you know you want to really![8D]

Cheers

JJ

Local accounts worked.
why I cannot use LDAP for authentication?



Jason Jones -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (29.Jul.2008 10:32:30 AM)

Only supported for web publishing IIRC



justmee -> RE: Is it possible to configure Remote VPN on isa server which is not a domain member (29.Jul.2008 10:43:30 AM)

Because is not available.[8D]
If you would have read the RADIUS authentication link I've posted you may had found a more scalable solution, a "basic" authentication method supported by many VPN servers.
If you do not make ISA a domain member, and use IAS active directory integrated, you loose ISA's capability of creating group-based firewall access rules for your VPN clients. User mapping won't help you, 'cause there is nothing to mapped to.
Anyway, you would not be concern with local users on ISA and groups, this might work if would have a couple of users only. Not sure if this practice is supported/recommended by Microsoft in a production environment.
J



Page: [1]