Link to home
Start Free TrialLog in
Avatar of isdd2000
isdd2000

asked on

VPN Setup for new network

Hi Experts,

We are wanting to set-up a VPN to one of our remote sites purely for help desk purposes. I know there is a few ways to setup a VPN connection but we wanted something secure, reliable whilst being cost effective.

The Environment
Onsite there is a Server 2012 Std box with SQL Installed
It is a remote site with a 3G connection (will be using dyn dns)
4 or 5 machines onsite

What are your thoughts on an effective VPN Solution?

Look forward to reading your comments.
ASKER CERTIFIED SOLUTION
Avatar of SvenIA
SvenIA
Flag of Netherlands image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of isdd2000
isdd2000

ASKER

Hi SvenIA,

How secure is Windows VPN, is there any vulnerabilities I need to be aware of to protect my network?
Hi,

I'm not really sure how secure, for example, MSChapv2 is really. You could take a look at Network Access Protection (NAP). Also available in Windows Server 2012.

http://www.windowsecurity.com/articles-tutorials/Windows_Server_2012_Security/understanding-configuring-network-policy-access-services-server-2012-part2.html
Avatar of Cliff Galiher
If this is *only* for helpdesk purposes and won't be used for regular site data then I'd recommend purpose-built tools for the job. Most of your professional remote support tools have VPN functional as part of their feature set. Look at products like Teamviewer or Yamauchi from LogMeIn. These will provide a better level of user control than a native VPN tunnel.

Native tunnels have their purpose, but are meant to solve a different problem and have a fairly steep curve in both knowledge to set up and ongoing management, monitoring, intrusion detection, and maintenance. The money you save bynusing that "free" role is quickly lost in labor cost. The ROI is just not there.
@ISDD2000

What exactly are you gonna use the VPN for? What kind of helpdesk work are you gonna do with it?
Dear ISDD2000,

Kindly use any firewalls or routers to do the VPN job for your premises. I will recommend CISCO ASA/Fortigate/Palo-alto for firewalls and CISCO 29XX  for router.

You can use site to site VPN for your sites. If it is more than one site and all the remote sites needs to communicate each other then you can go for a Hub and Spoke VPN.

Kindly let me know in which solution that you are interested with.

Regards,
LAJAN JALEEL
Hi Experts,

I need to be able to access an ip device that isn't a computer. Hence the VPN.

So I would like to know the benefits of using a hardware firewall over native windows firewall, with security and management. So far the feedback has been great!