Solved

Problem with VPN connections throught a ISA 2006 server

Posted on 2008-10-16
7
257 Views
Last Modified: 2012-06-21
Hi Experts,

My organization has a ISA Server 2006 as a firewall, working with two interfaces, internal and external. We have internal computers establishing VPN connection with other external VPN servers, but when the other VPN end is a Zyxel router/firewall, the VPN can not be established, showing error 619 on the origin (the Windows XP computer trying to establish a PPTP VPN). If we stop the ISA Server and configure our router to work without the ISA Server, this VPN connection is established without problem. We allways use NAT.

Any idea about what's happening with ISA Server?

Thanks in advance.
0
Comment
Question by:david-marti
  • 3
7 Comments
 
LVL 63

Expert Comment

by:SysExpert
Comment Utility
I would check all the filters and rules to see what traffic you are blocking.


I hope this helps !
0
 
LVL 63

Expert Comment

by:SysExpert
Comment Utility
ALso check the relevant logs

0
 

Author Comment

by:david-marti
Comment Utility
Thanks for your answer.

No, nothing blocks this kind traffic. I can successfully establish VPN with other VPN servers using PPTP ... the only problem is with this Zyxel.
0
 
LVL 63

Accepted Solution

by:
SysExpert earned 250 total points
Comment Utility
Upgrade the firmware.

0
 
LVL 77

Assisted Solution

by:Rob Williams
Rob Williams earned 250 total points
Comment Utility
One thought: make sure NAT-T (NAT-traversal) is enabled on the Zyxel, in its VPN configuration.
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

For a while, I have wanted to connect my HTC Incredible to my corporate network to take advantage of the phone's powerful capabilities. I searched online and came up with varied answers from "it won't work" to super complicated statements that I did…
Juniper VPN devices are a popular alternative to using Cisco products. Last year I needed to set up an international site-to-site VPN over the Internet, but the client had high security requirements -- FIPS 140. What and Why of FIPS 140 Federa…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

9 Experts available now in Live!

Get 1:1 Help Now