From: Kirkland, WA
When I first setup ISA, I enabled IP routing and PPTP connections, and from our local network we could make pptp VPN connections through ISA out to the Internet. All of our clients are snat.
That recently quit working. The change I made some time ago was to enable the ISA server for incoming VPN. Does that change the ability for outgoing VPN?
I am somewhat confused because I have read that internal clients that need to connect VPN (pptp) through ISA to the Internet must be snat, and I also read they have to be web or firewall client, not snat! Well, our snat clients were definitely able to use pptp throug ISA before I configured the ISA server as a VPN server also.
So my question... can my ISA server configured also as a VPN server, still allow pptp snat clients to pass through to the internet? Or is this when they must be web or firewall clients?
From: Auburn, AL USA
Actually you donĘt have to uninstall the Cisco client. There is a Cisco VPN service that interferes with the MS IPSEC policy agent. All you should have to do is stop this service and your MS VPN connections will work great. The command prompt name of the service is cvpnd. Hope this helps.