0
votes
0answers
86 views

Automatic IPSec IP Blacklist

A new client of ours has a legacy web app on Win Server 2008 R2 and when we started diagnosing the event logs, there were multiple ip's in China trying to hit both their sa sql account and trying to ...
0
votes
1answer
204 views

Secure VPN on standalone Windows 2008 R2 server

I have been tasked with setting up a Windows 2008 R2 server, and I need to allow VPN access to it. I have RRAS set up which allows clients to connect via Windows VPN. Unfortunately, is uses PPTP by ...
0
votes
1answer
64 views

Can't setup IPSec policy for LDAP

I'm trying to setup IPSec policy for TCP port 389 that only allow limited group of IP address to connect. (The target machine was a domain controller.) So I added two filters, one to deny all ...
3
votes
2answers
311 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
4
votes
2answers
266 views

Implementing an isolated guest WLAN via IPSec VPN on Windows

We are attempting to set up a guest WLAN network that is isolated from the rest of our network. This is proving difficult due to a couple of technical reasons. My first choice was to use a separate ...
2
votes
1answer
387 views

Is it possible to connect two IPSec site-to-site VPNs to one Windows 2008 Server?

I need to connect to two IPSEC site to site vpns from a Windows 2008 Server at the same time. Is it posible? I tried to assign two IP Security Policies, but it seems I can only have one assigned at ...
1
vote
0answers
489 views

How to allow RDP through IPSEC using netsh advfirewall command

I have an offsite windows server 2008 R2 server. And an ipsec tunnel set on our router here plus a connection security rule in Advanced Firewall on the server. I have ssh access to the console on the ...
4
votes
3answers
284 views

How to lock down a Windows 2008 Server before connecting it to the internet

We're a very small company, about to install a new server at a colocation company. The plan is to install the OS, SQL, and IIS, test it, then courier it to the hosting company. It will then ...
1
vote
1answer
288 views

Can I create a IPSEC rule between two servers and still allow normal external traffic?

Simple enough really. Can I create a IPSEC rule/filter between two publically available servers (they are actually on the same network) while still allow external traffic to the same resources. I'll ...
0
votes
1answer
871 views

IPsec Policy Agent flip-flopping demand start/auto start in Windows Server 2008?

Looking through the event logs on my web server I noticed a strange pattern. The following events have been occurring over and over again, always back to back: The start type of the IPsec Policy ...
2
votes
3answers
7k views

How to setup an IPSec / GRE tunnel on Windows Server 2008

I have a Windows Server 2008 that has a single network interface configured with a public IP address. My business partner has a private network. From my server, I need to access all the devices on his ...