Solved

Win 2k, VPN & Firewalls

Posted on 2002-04-04
2
146 Views
Last Modified: 2010-04-13
We have a win2k server which we would like to use for VPN (win2k VPN) acces to our network.  The server is NOT our domain controller.  I can see 2 options for our network and i would appreciate somebody pointing out the good and bad points of each.

1. Using 1 to 1 NAT on the firewall to the VPN server (VPN NIC) and the other NIC on the LAN.

2. The VPN NIC going to a public IP on our router (bypassing the firewall) and the other NIC on our LAN.

I would like the security of the firewall but im not sure of the implications of a user actually being inside our firewall and on our LAN before being authenticated by VPN (or does NAT prevent this?).

Any comments would be appreciated.

Thanks,

Stu.
0
Comment
Question by:stu_bill
2 Comments
 
LVL 11

Accepted Solution

by:
geoffryn earned 50 total points
ID: 6918453
Assuming that yo uare using MS VPN and you configure the firewall correctly, the only traffic from the internet that will be allowed on your LAN is TCP port 1723 and GRE packets.  The firewall should only allow these packets to be forwarded to the VPN server.  Your real vulnerablility is to brute force attacks on the passwords of the VPN server and man in the middle attacks on the VPN session itself.  Generally, this set up will be much more secure that having a naked interface from the VPN server on the internet.  With all security scenarios, you need to follow a defense in depth model and use complex passwords and manage the VPN server security tightly.
0
 

Expert Comment

by:oricks
ID: 6918652
Depending on what firewall you are using. I have a Watchguard fireboxII and I was able to setup PPTP VPN users that authenticate to the firewall's external IP address with a user name and password that I assigned. It then issues a private IP address to that incoming VPN connections and I then have the user use Terminal services to connect to a specific server. Find all info you can about your firewall or use tech support. this method works pretty slick for me.
0

Featured Post

The Eight Noble Truths of Backup and Recovery

How can IT departments tackle the challenges of a Big Data world? This white paper provides a roadmap to success and helps companies ensure that all their data is safe and secure, no matter if it resides on-premise with physical or virtual machines or in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Group Policy 9 558
Active Directory Replication 10 1,139
Windows 7 7 262
Raising Domain/Forest Level to Windows 2003 (from a retired Windows 2000 DC) 8 148
NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Examines three attack vectors, specifically, the different types of malware used in malicious attacks, web application attacks, and finally, network based attacks.  Concludes by examining the means of securing and protecting critical systems and inf…
In a recent question (https://www.experts-exchange.com/questions/28997919/Pagination-in-Adobe-Acrobat.html) here at Experts Exchange, a member asked how to add page numbers to a PDF file using Adobe Acrobat XI Pro. This short video Micro Tutorial sh…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

815 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now