Puff The Magic Wagon!

iTrader: (2)

Network as follows.

Internet - Router (open) - Sonicwall - ISA2004 - Internal Network

Now we are VPN'ing via the Sonicwall VPN server to other servers elsewhere & ISA is not installed yet. VPN is open to all traffic.

I will be right in thinking that ISA once installed will block all traffic intended for the remote servers until those ports are opened? Then its a pita to work out whats needed & open it up.

Anyhow, is there a way in ISA2004 that I can say that ALL traffic to a certain external IP is to be allowed out/in? It then gets routed via the VPN so won't be an issue.

aqua

No exact answers sorry but the following might help
Regards
Henry

http://support.microsoft.com/default...7&Product=ISAS

http://www.isaserver.org/tutorials/2...unnelmode.html

The MS link not showing in full try this one instead:

http://tinyurl.com/5rop7

ozzy

Puff,

Yes ISA blocks everything by default. You can create rules to open ports and allow access to certain IP addresses. How to configure depends on the install of ISA i.e. proxy only or as a firewall and the number of NIC's in the ISA box.

ISA has it's own VPN settings, so watch for that conflicting with the SonicWall. You could create a new network setting (using your remote VPN network addresses) and then just configure ISA to route traffic to/from that network. That would leave the SonicWall to manage the security of the actual VPN.

Stefan

Jeff Wiltshire

Probable a stupid question but why are you using ISA when you have a SonicWALL...?

Puff The Magic Wagon!

iTrader: (2)

The poxy aspect mainly & managing of what the users can/cannot load/see etc

Jeff Wiltshire

You might want to have a look at using SonicWALL Content Filter Service....

Also there are likely to be some announcements shortly from SonicWALL which will help your situation....