This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Where to put my Windows 2003 RAS/VPN Server

We are just starting to look in putting a VPN gateway for our network. We decide to use MS Windows 2003 VPN gateway solution. We currently have the astaro firewall with 3 NIC, (external, internal, and DMZ) Can anyone provide some feed back on the plus and minus of putting the VPN gateway in the DMZ versus on the same subnet as the firewall (bsaically, do we want to firewall off the VPN gateway) Any feedback would be strongly appreicated

dwc

This thread was automatically locked due to age.

0 SecApp over 21 years ago

I guess that all depends on how much you trust Microsoft...

How's about: better safe than sorry? Put it on the DMZ. That's the beauty of this product compared to other server firewall products: additional NICs are cheap...
Cancel
Vote Up 0 Vote Down

Cancel
0 Dominic Chan over 21 years ago in reply to SecApp

Since I am going to NAT my MS VPN gateway behind the firewall as you per suggested in the DMZ segment. What port do I need to open up (policy) for MS VPN to work?
Cancel
Vote Up 0 Vote Down

Cancel
0 SecApp over 21 years ago in reply to Dominic Chan

1723/TCP
and GRE (which is IP protocol 47)
Cancel
Vote Up 0 Vote Down

Cancel