Windows Forum

Ask something
Discussion Locked

Security and WIN 2K VPN

0 helpful
3 replies

by sturner 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Question: What security (software) can be used to protect a server directly connected to the Internet that will allow me to allow the Windows 2000 Server VPN (Routing and remote access) thru only? I currently use a Sonicwall Pro 300 for security butit will not forward Port 0 (neither will Zone ALarm Pro 3) which is used in a VPN connection (thought this was wierd but verified in Knowledge base.

Also would be nice if it could be applied to only one NIC on a mutlihomed system!

Thanks for any info!

3 replies

by garydw

There are several different options, With Windows 2000 RRAS as soon as you setup the VPN the system will AUTOMATICALLY put IP filtering on it so that only VPN traffic will be allowed through the card - This is why one of the wizards asks you which card you will have on the internet.

Another option is to have a SINGLE card in the VPN box and put the box on the DMZ of your network, This way the firewall does all the routing and your VPN is protected from 'direct' internet access.

One thing I don't understand though is why you want to forward Port 0?
The VPN protocols L2TP and PPTP use ports 1701 and 1723 respectivly, Most filtering is done on the TCP packet header rather than the port.

Hope that is of some help to you. If you have any questions then please drop me an email.

--
Gary Williams.

This discussion is closed to new replies.