Discussion Locked

Outlook via VPN

0 helpful
6 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Has anybody setup access to an Exchange server to a "road warrior" via VPN, using PIX firewall?

What is needed on the PIX, client and Exchange server for this to work?

6 replies

by mike jones

Can't talk you through the PIX connection apart from you need to forward port 1723 to your VPN server and allow incoming and outgoing access to this port if you use PPTP as the security protocol. I assume you can use the PIX as the VPN server whichI cannot help with if you are going to create the VPN connection this way.

The VPN connection on the client should be a standard connection unless you are using smart cards and the such.

You shouldn't need to do anything to Exchange as the VPNconnection should fool the Exchange Client into thinking its directly connected to the network.

If you need more information, you need to post more details of how you think it should work.

by jeff schaper

Thanks Mike, I just wanted to confirm it could be done as the supplier that sold me the equipement, after selling it to me says I am not able to get a user that travels to connect back to our exchange server over a VPN. I wanted to confirm that a user laptop with VPN client and the PIX with VPN loaded was all I needed.

by dukebytes

You can setup the PIX to accept the VPN traffic and authenticate to a radius or TACACS server. Or you can get a VPN concentrator from Cisco and have the client connect to it. And all you need on the client side is Cisco's VPN client software - I think its a $100 for unlimited licenses.

The concentrator is a good idea - it off loads the work the VPN creates from the PIX and you dont need a radius server with the concentrator. The 3005 VPN box from Cisco should cost you LESS than setting upa radius server in the 1st place. Something to look into.

The Exchange box won't care either way - as long as your remote is VPN'd into the inside network - the Exchange server will see it as an inside connection.

Good luck,
Duke

This discussion is closed to new replies.