I was wondering if it's possible to make a VPN to connect to IIS on a single server. I want IIS to refuse connection if it's connecting from another address than the VPN.
Is that possible?
I've searched on google, but nothing came up...
Server Fault is a question and answer site for system and network administrators. It only takes a minute to sign up.Sign up to join this community
You can set up a VPN whichever way you want as long as it consistently gives the same IP address (or one of a range of IP addresses if you are alright with setting a firewall rule for the whole range). There are lots of ways to do this (RRAS, openvpn, etc.). The VPN server endpoint could be on the IIS server or elsewhere depending on your preference.
You could then use windows firewall to block traffic to your IIS ports if it doesn't come from that IP address or block.
You won't find a recipe for doing that, because it is an unusual thing to do, but there are lots of different ways to accomplish it.
You can't do this with only IIS; you will need other components.
If you are trying to deny access to your website to anyone but your VPN users, you could lock down your entire network from the outside world and only allow the VPN connection.
Once your users connect to the VPN, they could access any internal websites you have running by either accessing them by IP address or url and validate their referring IP address either in code or by way of IIS to allow or disallow further access.