ISA 2004 SLG OpenVpn

[marekbrad]

Hi Folks

 

Just had SLG Hosted installed but having a few problems allowing the open Vpn clent on the sims server through ISA 2004...

 

Has anybody got this working and if so what are the rules required for ISA2 2004 to allow the traffic.. I have a default rule at the mo which allows all traffic but still the open vpn client will not connect. We are behind local authority fwall and if i set the ip of the sims server to be the same as the external ip on isa then all works fine.. the minute it goes back behind ISA then open vpn will not connect.

 

argh

[SYNACK]

You will need to tell ISA which way to direct the traffic with a publishing rule as at the moment it will not know where to send it. You will also want to kill the allow any rule as soon as possible given the security risk.

 

What you want to do is add a rule to publish a server and when it asks for which protocol to allow you will want to add one for OpenVPN. The required ports are

Installing a Virtual Private Network with OpenVPN

Open ports 1194/UDP and TCP (the new, official OpenVPN port) and 5000/UDP (the old OpenVPN port) in your firewall for both directions.

 

Then make sure that this rule has a source of the external network and a destination of your OpenVPN server.

 

Apply the configuration and you should be done.

Edited August 19, 2009 by SYNACK