This process
varies between the various VPN products, so it is recommended to consult the documentation
of the product in question on how to set up an IPSec Tunnel back to the ISA server.
As with PPTP and L2TP connections, network and firewall rules must be set up between
the newly configured networks to make sure that traffic can properly flow between them.
Summary
ISA Server 2006??™s site-to-site VPN capabilities allow organizations to extend the
Application-layer filtering capabilities of ISA Server to remote sites, extending a network
without the need for expensive and cumbersome WAN connections. In addition, ISA??™s
broad support for multiple encryption protocols and authentication methods allows for
support of existing third-party VPN products, enabling ISA to co-exist with existing security
infrastructure more easily.
FIGURE 10.13 Creating a network rule for the VPN connection.
295
10
Configuring ISA 2006 to Integrate with Third-Party VPN Tunnel Products
Best Practices
. Use L2TP over IPSec certificates-based encryption when possible for site-to-site
VPN tunnels.
. Be careful not to disable local user account access when using the Security
Configuration Wizard (SCW) or this will disable site-to-site VPN access.
Pages:
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504