Hello Need help port forwarding server2012r2 ssl vpn and cctv ip camera & rdp
to go through firewall and where I can access them all remotely.
Please explain how to do all of this.
Hello Need help port forwarding server2012r2 ssl vpn and cctv ip camera & rdp
to go through firewall and where I can access them all remotely.
Please explain how to do all of this.
Yes I have and it hasn't worked as now I cannot use my ddns name: keyedinsoftwarelicsrv.us or my ip or anything to access 443(https). as it either says connection_refused or connection_timed_out and yes I am using chrome if that helps. And I can now see using canyouseeme.org a port checker tool that webmin port is open & my ip cam port & rdp but not 443(https)
okay but do I use internal(address) or external address? for traffic selector going into the network basically going to my 2012r2 server? because the only thing that isn't working is https which should be forwarded to my 2012r2 server hosting sstp(or ssl vpn) and possibly directaccess if I can ever get it configured right. Also if it would help have ssl vpn configured on sophos utm too, was trying to test it and figure it out, if that helps to figure out if it is causing this. Since I don't know whether the 2012r2 and sophos utm ssl vpn is fighting against each other or not.
Don't use 2 separate SSL-VPN's. It's not possible that both operate at the same port. You can change port (or protocol) for one of them, but you will still have to manage and maintain both. Stick to just 1 and my advise is to use Sophos UTM for SSL remote access. Set this up using UDP (and not TCP) because it will be faster.
For DNAT you should always use the External (Address) object for traffic going to, since it's traffic arriving at your external interface and from there on it has to be forwarded to your internal server.
Don't use 2 separate SSL-VPN's. It's not possible that both operate at the same port. You can change port (or protocol) for one of them, but you will still have to manage and maintain both. Stick to just 1 and my advise is to use Sophos UTM for SSL remote access. Set this up using UDP (and not TCP) because it will be faster.
For DNAT you should always use the External (Address) object for traffic going to, since it's traffic arriving at your external interface and from there on it has to be forwarded to your internal server.
okay so just use sopohs utm for ssl vpn? and also use udp not tcp? and DNAT I use the external address for traffic selector asking going to. just need you to give me like a diagram or screenshot of what you mean like do you mean -- modem(internet)-->sophos utm(in port)-(External-Address)-->Going to Sophos UTM(Internal Address)(Out Port to internal network)? or what do you mean specifically as a screenshot of how to set this up or more guidance would be helpful. Also the only reason I prefer 2012r2 ssl vpn to sophos utm ssl vpn is that I want to use only native windows 7 vpn client not a customized software to use it that I would and everyone else probably won't have admin access to install and use.
Sorry for the late reply, but here's an example of a DNAT rule I have in use.
At going to I have an External WAN (Address) object.
I'm using SSH for this example, but you should use the port(s) for SSL VPN. I'm not sure which these are, but it shouldn't be too hard to find the right port(s).
Don't use 2 separate SSL-VPN's. It's not possible that both operate at the same port. You can change port (or protocol) for one of them, but you will still have to manage and maintain both. Stick to just 1 and my advise is to use Sophos UTM for SSL remote access. Set this up using UDP (and not TCP) because it will be faster.
For DNAT you should always use the External (Address) object for traffic going to, since it's traffic arriving at your external interface and from there on it has to be forwarded to your internal server.
Sorry for the late reply, but here's an example of a DNAT rule I have in use.
At going to I have an External WAN (Address) object.
I'm using SSH for this example, but you should use the port(s) for SSL VPN. I'm not sure which these are, but it shouldn't be too hard to find the right port(s).
Ok, thanks for the screenshot here is the ports directly from microsoft Configure a Firewall for VPN Traffic and also from a blog that tells you also: Setup a Windows Server 2012 VPN : Page 2 of 3 : Sysads Gazette so it only requires port 443 to be forwarded to the 2012r2 vpn server for ssl vpn to work(sstp) so please help me with configuring this.
Here is a screenshot of my config if it will help:
[ATTACH]12409[/ATTACH]
