Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are working on some proof of concept project.

We have some clients those are outside of the our company network. We incorporated each clients into our network through Microsoft VPN. Each client joined same network that's ok. But I just want to close all network traffics except http(s) 80, 443 on this created VPN network to protect each connected client's privacy, public folder access etc.

Any advice would be appreciated.


Update :

The question is, is there any way to block network traffic except port 80, 443 on VPN adapter of connected client ?

share|improve this question

closed as not a real question by HopelessN00b, HostBits, Tom O'Connor, gWaldo, Dave M Aug 17 '12 at 14:38

It's difficult to tell what is being asked here. This question is ambiguous, vague, incomplete, overly broad, or rhetorical and cannot be reasonably answered in its current form. For help clarifying this question so that it can be reopened, visit the help center.If this question can be reworded to fit the rules in the help center, please edit the question.

And the question is...? Yes, it can be done (but they won't be able to access file shares or other services on your network if you restrict them to http/s). – HopelessN00b Aug 17 '12 at 13:18
@fyasar Why use a VPN if they're only going to be accessing websites? Seems like it would be a lot easier to just have the website publicly facing with encryption and authentication. – Chris S Aug 17 '12 at 13:23

The short answer is of course you can block or simply deny traffic on anytyhing put the standard HTTP and HTTPS ports. However, as others have pointed out why would you want to do this?

HTTPS traffic in particular is fairly secure and runs over the same level of encryption that most VPN tunnels can offer and in some cases offer greater levels of encryption that certain VPN tunnels. If you simply want to make internal sites available over the internet simply make them all HTTPS and then require Windows Authentication to access them. It doesn't get much more secure than that and is most likely the simplest thing you can possibly do.

If my understanding isn't right then update your question to be more specific.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.