• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

New IPSec / NAT-T KB Articles

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> VPN >> New IPSec / NAT-T KB Articles Page: [1]
Login
Message << Older Topic   Newer Topic >>
New IPSec / NAT-T KB Articles - 16.Jun.2005 4:20:00 AM   
Andy2Long

 

Posts: 16
Joined: 7.Oct.2003
From: Torrance, CA
Status: offline
Has anyone decided how the two new KB articles apply to ISA VPN, since ISA can be considered NAT device?

IPSec NAT-T is not recommended for Windows Server 2003 computers that are behind network address translators
http://support.microsoft.com/kb/885407/

The default behavior of IPsec NAT traversal (NAT-T) is changed in Windows XP Service Pack 2
http://support.microsoft.com/kb/885407/

Andy
Post #: 1
RE: New IPSec / NAT-T KB Articles - 16.Jun.2005 3:16:00 PM   
spouseele

 

Posts: 12830
Joined: 1.Jun.2001
From: Belgium
Status: offline
Hi Andy,

as long as the ISA server is the VPN endpoint and has a public IP address, you shouldn't have to do any tweaking.

HTH,
Stefaan

(in reply to Andy2Long)
Post #: 2
RE: New IPSec / NAT-T KB Articles - 18.Jun.2005 2:13:00 AM   
Andy2Long

 

Posts: 16
Joined: 7.Oct.2003
From: Torrance, CA
Status: offline
Are you saying that these do not apply to ISA 2004 on Windows 2003?

I know that much of the Microsoft VPN KB is for stand alone RRAS installations on Windows 2003, but these KB articles are about changes for XP and 2003.

So I guess I was looking for opinions on any effect these changes may have on ISA 2004.

Andy

(in reply to Andy2Long)
Post #: 3
RE: New IPSec / NAT-T KB Articles - 18.Jun.2005 3:20:00 AM   
ClintD

 

Posts: 1848
Joined: 26.Jan.2001
From: Keller, TX
Status: offline
The articles only apply when the VPN Server endpoint is behind a NAT deivce. Yes, ISA has NAT functionality, but it is the endpoint in most scenarios and isn't affected by this.

(in reply to Andy2Long)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> VPN >> New IPSec / NAT-T KB Articles Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts