Hello,

I've been able to get SBS 2003 to work with all my remote access requirements working just fine on several test machines at home. The problem is that at work, I've inherited a Cisco PIX firewall 506e that I have no idea how to configure. This has been in place for several years with no updates installed on it. There is no GUI interface and I'm not at all familiar enough with Cisco firewalls to update or re-configure it to work with SBS 2003. (Previously, we had NT 4, with no remote access other than OWA configured).

My question is, does anyone know of a good basic firewall that SBS can configure through the ICW that will work well with SBS using VPN and OWA.

I have several users that need to connect through VPN but they have dynamic IP's so I'd like to allow VPN pass-through and use Windows Authentication to allow access. Is this a good solution for SBS 2003?

Thanks,

John

Re: Firewall and SBS 2003 by SuperGumby

SuperGumby
Mon Jun 14 16:47:34 CDT 2004

any of the commodity routers from NetGear, DLink, SMC will work, they aren't
configured by SBS though. Even a fully UPnP router will probably not be
fully configured by SBS.

A mate has a good rundown on routers http://www.ozcableguy.com/routers.html

One thing about your choice. From the start choose whether you wish SBS or
the router to handle VPN. Many VPN endpoint capable routers make it
difficult to terminate the VPN at the SBS.

With a single NIC SBS it is desirable to terminate VPN's at the router.
Most of us prefer a dual NIC SBS and a router which does 'VPN Passthrough'
incoming (almost all will do outgoing passthrough). VPN passthrough may also
be referred to as PPTP passthrough, or even GRE passthrough.

Note though, that PIX is a good, if complex, device. It would certainly be
worthwhile updating it and learning to use it.

"John Riddle" <JohnRiddle@discussions.microsoft.com> wrote in message
news:3D188C19-75ED-4673-AA8A-49B7FCDE7C00@microsoft.com...
> Hello,
>
> I've been able to get SBS 2003 to work with all my remote access
requirements working just fine on several test machines at home. The problem
is that at work, I've inherited a Cisco PIX firewall 506e that I have no
idea how to configure. This has been in place for several years with no
updates installed on it. There is no GUI interface and I'm not at all
familiar enough with Cisco firewalls to update or re-configure it to work
with SBS 2003. (Previously, we had NT 4, with no remote access other than
OWA configured).
>
> My question is, does anyone know of a good basic firewall that SBS can
configure through the ICW that will work well with SBS using VPN and OWA.
>
> I have several users that need to connect through VPN but they have
dynamic IP's so I'd like to allow VPN pass-through and use Windows
Authentication to allow access. Is this a good solution for SBS 2003?
>
> Thanks,
>
> John



Re: Firewall and SBS 2003 by JohnRiddle

JohnRiddle
Mon Jun 14 18:09:01 CDT 2004

I've already decided that I will be handling the VPN through the SBS. I'm simply looking for the easiest to configure and maintain solution so that I can do my normal job within the company and not have to mess with the server much. (I'm the default Admin for our very small office)

I was hoping that since SBS claims to have support for configuring UPnP routers that I could find something that would actually "Plug and Play" with SBS through the ICW.

I have a D-Link at home configured with my SBS 2003 test machine and I've got everything working fine. I'd like to get rid of the Cisco (even though, it seems silly). I don't get paid for my extra duties as Admin and don't want to spend extra time learning Cisco. Since it hasn't been updated in several years by the outside firm that was previously handling our network (fixing problems only as they come up and taking quite a while to do that), I'm sure that a newer, lower priced, easier to configure router would be more secure that our outdated set-up being used currently.

Has anyone had any success with SBS ICW auto-congfiguring any type of router without errors?

John

"SuperGumby [SBS MVP]" wrote:

> any of the commodity routers from NetGear, DLink, SMC will work, they aren't
> configured by SBS though. Even a fully UPnP router will probably not be
> fully configured by SBS.
>
> A mate has a good rundown on routers http://www.ozcableguy.com/routers.html
>
> One thing about your choice. From the start choose whether you wish SBS or
> the router to handle VPN. Many VPN endpoint capable routers make it
> difficult to terminate the VPN at the SBS.
>
> With a single NIC SBS it is desirable to terminate VPN's at the router.
> Most of us prefer a dual NIC SBS and a router which does 'VPN Passthrough'
> incoming (almost all will do outgoing passthrough). VPN passthrough may also
> be referred to as PPTP passthrough, or even GRE passthrough.
>
> Note though, that PIX is a good, if complex, device. It would certainly be
> worthwhile updating it and learning to use it.
>
> "John Riddle" <JohnRiddle@discussions.microsoft.com> wrote in message
> news:3D188C19-75ED-4673-AA8A-49B7FCDE7C00@microsoft.com...
> > Hello,
> >
> > I've been able to get SBS 2003 to work with all my remote access
> requirements working just fine on several test machines at home. The problem
> is that at work, I've inherited a Cisco PIX firewall 506e that I have no
> idea how to configure. This has been in place for several years with no
> updates installed on it. There is no GUI interface and I'm not at all
> familiar enough with Cisco firewalls to update or re-configure it to work
> with SBS 2003. (Previously, we had NT 4, with no remote access other than
> OWA configured).
> >
> > My question is, does anyone know of a good basic firewall that SBS can
> configure through the ICW that will work well with SBS using VPN and OWA.
> >
> > I have several users that need to connect through VPN but they have
> dynamic IP's so I'd like to allow VPN pass-through and use Windows
> Authentication to allow access. Is this a good solution for SBS 2003?
> >
> > Thanks,
> >
> > John
>
>
>

Re: Firewall and SBS 2003 by Robbie

Robbie
Tue Jun 15 09:26:14 CDT 2004

"John Riddle" <JohnRiddle@discussions.microsoft.com> wrote in message
news:3D188C19-75ED-4673-AA8A-49B7FCDE7C00@microsoft.com...
> Hello,
>
> I've been able to get SBS 2003 to work with all my remote access
requirements working just fine on several test machines at home. The problem
is that at work, I've inherited a Cisco PIX firewall 506e that I have no
idea how to configure. This has been in place for several years with no
updates installed on it. There is no GUI interface and I'm not at all
familiar enough with Cisco firewalls to update or re-configure it to work
with SBS 2003. (Previously, we had NT 4, with no remote access other than
OWA configured).
>
> My question is, does anyone know of a good basic firewall that SBS can
configure through the ICW that will work well with SBS using VPN and OWA.
>
> I have several users that need to connect through VPN but they have
dynamic IP's so I'd like to allow VPN pass-through and use Windows
Authentication to allow access. Is this a good solution for SBS 2003?
>
> Thanks,
>
> John

Draytek 2600 series are great. Very easy to configure and can be set up for
VPN or VPN passthrough. Think there may have been an issue with earlier
versions as regards forwarding certain protocols but I've had no problems
recently.

www.seg.co.uk



Re: Firewall and SBS 2003 by JohnRiddle

JohnRiddle
Tue Jun 15 10:02:01 CDT 2004

Thanks. Do you know if the ICW can configure it automatically?

"Robbie Niblock" wrote:

> "John Riddle" <JohnRiddle@discussions.microsoft.com> wrote in message
> news:3D188C19-75ED-4673-AA8A-49B7FCDE7C00@microsoft.com...
> > Hello,
> >
> > I've been able to get SBS 2003 to work with all my remote access
> requirements working just fine on several test machines at home. The problem
> is that at work, I've inherited a Cisco PIX firewall 506e that I have no
> idea how to configure. This has been in place for several years with no
> updates installed on it. There is no GUI interface and I'm not at all
> familiar enough with Cisco firewalls to update or re-configure it to work
> with SBS 2003. (Previously, we had NT 4, with no remote access other than
> OWA configured).
> >
> > My question is, does anyone know of a good basic firewall that SBS can
> configure through the ICW that will work well with SBS using VPN and OWA.
> >
> > I have several users that need to connect through VPN but they have
> dynamic IP's so I'd like to allow VPN pass-through and use Windows
> Authentication to allow access. Is this a good solution for SBS 2003?
> >
> > Thanks,
> >
> > John
>
> Draytek 2600 series are great. Very easy to configure and can be set up for
> VPN or VPN passthrough. Think there may have been an issue with earlier
> versions as regards forwarding certain protocols but I've had no problems
> recently.
>
> www.seg.co.uk
>
>
>

Re: Firewall and SBS 2003 by Robbie

Robbie
Tue Jun 15 10:32:59 CDT 2004

"John Riddle" <JohnRiddle@discussions.microsoft.com> wrote in message
news:993682CE-A74B-442F-94CF-4C7288FC47C6@microsoft.com...
> Thanks. Do you know if the ICW can configure it automatically?
>

I'm not entirely sure what you mean by that. The ICW will configure
everything on the server to talk to the Draytek.

Obviously you have to setup a few things on the Draytek itself. I'll assume
you'll be using a non-NAT service here (fixed external IP address).

On the draytek, you'll need to configure the ADSL connection to the ISP with
the user name etc, the IP address you want to you for the LAN side and
obviously open up your ports and redirect them. It's really simple though,
all very logical and anyone with some knowledge of TCPIP principles will do
it in minutes.

If you have any specific queries, let me know.

Robbie