Questions tagged [sstp]

Secure Socket Tunneling Protocol (SSTP) is a form of VPN tunnel that provides a mechanism to transport PPP or L2TP traffic through an SSL 3.0 channel

Filter by
Sorted by
Tagged with
0 votes
0 answers
12 views

Dedicated RAS DHCP pool

We have an SSTP server providing VPN access to our users. Said server is assigning IPs from the default DHCP pool from our Windows DHCP server. Now, I COULD set up the DHCP server on the SSTP server ...
user avatar
  • 325
0 votes
0 answers
26 views

Securing Windows Server NPS/SSTP

Looking at our NPS logs I see we're getting hammered; some online actor is doing a brute force on various login names and passwords. In general this isn't an issue... yet. It doesn't appear that a ...
user avatar
  • 325
0 votes
0 answers
263 views

Unable to connect to Azure VPN gateway (SKU = VpnGW1, SSTP) from Linux (Ubuntu 20.04 + pppd + sstp-client)

I tried to connect from Linux to Azure VPN Gateway but it failed. Please let me know if there are any deficiencies in my settings. Environment information Client VirtualBox 6.1.26 on Windows 10 ...
user avatar
  • 1
0 votes
0 answers
2k views

Is it possible to hack a server with a SSTP_DUPLEX_POST request?

How is it possible to use the method : SSTP_DUPLEX_POST and the url : /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ to hack a server ? I have this request in my logs from a well known malicious IP ...
user avatar
0 votes
1 answer
489 views

RRAS SSTP VPN and DNS Resolution with multiple suffix

So we have domain example.com and have our active directory setup as ad.example.com. When I VPN (SSTP on RRAS) if I ping any thing (eg server.ad.example.com) it gives me an internal ip address (...
user avatar
  • 321
0 votes
0 answers
36 views

VPN into work network - Suggestions, Concerns

I have been tasked to setup a vpn into our company. We have a single windows 2016 server that is acting as everything. A DC, AD, File Server, Web Server, SQL Server, and now perhaps a VPN Server. I ...
user avatar
0 votes
1 answer
282 views

IKEv2 certificate error but SSTP successfully connects Windows 10 pro / Windows Server 2019

I'm using Windows server 2019 (installed roles: AD DC, CA, DHCP, DNS, IIS, VPN). my client is Windows 10 pro. before installing the Online responder role and having a CRL server, IkEv2 was working, ...
user avatar
1 vote
0 answers
248 views

SSTP VPN works but no Internet connection on Ubuntu

I've established SSTP VPN client on my Ubuntu connecting to SSTP VPN server. I'm using http://sstp-client.sourceforge.net/ SSTP VPN client. And with this network manager plugin https://github.com/...
user avatar
  • 109
0 votes
1 answer
1k views

SSTP VPN connection fails after updating / removing an IIS certificate

After I removed / updated an IIS certificate, I am unable to maintain an SSTP VPN connection with the server. As far as I recall the certificate was NOT used for authentication. Users authenticate ...
user avatar
  • 121
0 votes
0 answers
272 views

MS SSTP Server with multiple certificates / hostnames

We currently have an SSTP server (running on Windows Server 2008 R2 but it is being migrated to Windows Server 2016). At the moment, the server is configured using a wildcard certificate for one of ...
user avatar
  • 325
1 vote
0 answers
1k views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
user avatar
  • 409
1 vote
1 answer
424 views

HAproxy.cfg syntax: how to recognise SSTP other than by SNI

I've recently managed to configure HAproxy.cfg to run HTTPS and SSTP on the same port, and can recognise some website traffic by SNI. However, as I have multiple domains I would prefer to recognise ...
user avatar
1 vote
1 answer
1k views

How to configure HAproxy with SSTP and HTTPS

I'm using a MikroTik router with SSTP, and I have a Fedora server running httpd with HTTP and HTTPS, but I only have a single IPv4 address from my ISP. I currently have SSTP working on port 444, but ...
user avatar
0 votes
1 answer
739 views

Redirect SSTP traffic from Ubuntu Apache2 server to internal Windows Server

So this weekend i have been working on migrating my apache2 server to a docker container which i have no issues with. I currently have a windows server with SSTP and Exchange 2016 both using port 443 ...
user avatar
  • 197
-1 votes
1 answer
596 views

Install SSTP server on Windows 2008 (not R2). Possible?

I am trying to install RRAS on Windows 2008 (original Vista kernel version, not R2) in order to implement SSTP but after I configure RRAS, there is nothing in the security settings for setting the ...
user avatar
0 votes
0 answers
873 views

SSTP VPN on Windows Server 2016 works in LAN but not from WAN

I was setting up SSTP VPN on Windows Server 2016 at home using this tutorial. This works using a LAN client with Windows 10. The eventlog on the client shows: The user xxx has established a ...
user avatar
  • 111
1 vote
2 answers
3k views

Windows Server 2012 SSTP stops listening to port 443, how do I resume listening without a server restart?

I have a Windows 2012 R2 Standard Server setup with an SSTP VPN that is working for the most part. I have been able to connect to this VPN from an external computer and use everything properly. The ...
user avatar
  • 131
0 votes
1 answer
715 views

Can I set up a Windows SSTP VPN service without exposing the webserver?

I am trying to set up a SSTP VPN service in Windows 2016. I don't want to advertise to the world that my network exists let alone that I have a running webserver, but because the SSTP service runs ...
user avatar
  • 1,453
0 votes
0 answers
716 views

How to create site-to-site VPN from CentOS Server to Windows Server

For a small business: at one site is windows 2012 server, (with ssl certificate), already running as a SSTP VPN Server. At a remote site, is a live-to-public CentOS webserver running CFS. ...
user avatar
  • 747
1 vote
2 answers
2k views

Can't access Internet while connected to SSTP VPN on Azure

I'm able to connect successfully to my SSTP VPN on a Windows 2012 R2 machine running RRAS on Azure, but once connected, I can't access the internet. I understand that I could workaround this issue by ...
user avatar
1 vote
0 answers
4k views

SSTP VPN Certificate Revocation issue

I have Windows 2012 Server with RRAS set up on it to allow clients to connect via SSTP VPN. I have correctly set up the certificate on the server and issued it to clients. Whilst my clients that ...
user avatar
  • 11
1 vote
1 answer
3k views

Windows Server 2012 SSTP VPN/Cant Connect to SSTP VPN Server

I have setup a VPN server with Server 2k12 and i have set it up behind an NAT and external/remote clients can connect via PPTP just fine. I was having issues with L2TP but i further read that L2TP has ...
user avatar
  • 197
3 votes
1 answer
6k views

Setting up RRAS (SSTP) with public SSL certificate and public/private name mismatch (WS2012R2)

I have a domain joined WS2012R2 server I want to use for a VPN (SSTP). The machine itself is behind a NAT router (although it has a fixed IP and forwarding port 443 to it is straightforward). I want ...
user avatar
0 votes
1 answer
11k views

Cannot connect to SSTP VPN Error 20227

I have a working PPTP VPN on Windows Server 2008 and I can connect to this PPTP VPN on a Windows 10 notebook with an AD-User. But when I am trying to switch to SSTP on my Windows Server by importing ...
user avatar
  • 1
0 votes
1 answer
1k views

SSTP: Certificate issue

So I'm building an SSTP VPN. I get the following error when trying to connect to the VPN: A certificate chain processed, but terminated in a root certificate which is not trusted by the trust ...
user avatar
  • 286
0 votes
1 answer
325 views

Is RRAS SSTP VPN using publicly signed certificate a bad idea?

Most guides for deploying SSTP on RRAS recommend setting up a private CA using AD CS, with all the necessary steps that come with that to issue a server authentication certificate and have it trusted ...
user avatar
  • 1,802
2 votes
3 answers
6k views

Cannot submit certificate requests to root CA

I'm aware this question has been asked before, but none of the solutions have helped me. The reason I set up a CA was solely for the purpose of creating an SSTP VPN, so everything is all on one ...
user avatar
3 votes
2 answers
2k views

IPv6 with IPv4 over RRAS SSTP VPN from Client that only has IPv4 access

I'm setting up Server 2012 R2 RRAS to be a SSTP VPN. I've got IPv4 working perfectly. My environment is dual stack (v4 and v6). When I enable IPv6 on the VPN my client gets a valid address but is ...
user avatar
  • 321
0 votes
1 answer
1k views

Windows Server: VPN clients cannot see LAN clients

I'm trying to set up a server running Windows Server 2012 R2 to host VPN (RRAS). I have gotten VPN connections to work with certificates (SSTP). Now I need the VPN clients to be able to see LAN ...
user avatar
  • 35
-2 votes
2 answers
302 views

Networking VPN expert out there? Should Remote VPN "Client" be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
user avatar
  • 453
1 vote
1 answer
4k views

VPN SSTP windows client can not ping or connect to VPN server but it can talk to every other PC on the local LAN that VPN server is on

So I have an SSTP (with native Windows client) working fine in a sense. My windows client's local IP is 192.168.10.11 , so its local network is: 192.168.10.x The Remote VPN server is behind a router ...
user avatar
  • 453
0 votes
0 answers
604 views

Deploying SSTP VPN on Windows 2012 - How to route packets to other servers?

I've finally managed to deploy an SSTP VPN between my Windows 2012 (non R2) server and Windows 7 client. It's amazing how much easier it work with a real certificate and avoiding the self-signed ...
user avatar
3 votes
0 answers
2k views

Scheduled RasMan connection to SSTP VPN fails only at night

Background I have an SSTP VPN with a self-signed certificate. It's running on a physical instance of Server 2008 R2 on our LAN. Three off-network workstations are scheduled to connect to the VPN "at ...
user avatar
1 vote
3 answers
12k views

Windows Server 2012 R2 VPN - connects to network but cannot access server

I've configured Windows Server 2012 R2 SSTP VPN and for the most part it appears to be functioning normally. The remote machine connects, is allocated an IP address in the LAN, and has access to ...
user avatar
  • 121
2 votes
3 answers
9k views

Provide SSTP VPN and normal HTTPS Websites over the same Port and IP?

In my little lab I want to use SSTP VPN AND a HTTPS-Webpage, which should be accessible from the internet. I just have 1 public IP and the lab is behind NAT (Port forwarding 443). SSTP already works ...
user avatar
  • 196
0 votes
1 answer
305 views

Can connect through SSTP but not PPTP?

I have a window server 2008 r2 box behind a a Netgear AC1750 router. I've set up RRAS for a VPN and can successfully connect using SSTP, but if I try to connect to the VPN using PPTP I get a timeout ...
user avatar
  • 111
0 votes
1 answer
1k views

Windows Server 2008 R2 creating a multi-year client certificate using the IIS certsrv page while deploying SSTP VPN

I am trying to follow instructions on Technet about deploying a Standard (non-enterprise) SSTP based VPN) that were originally written for Server 2008, but I am using Server 2008 R2, I have gotten as ...
user avatar
  • 1,185
1 vote
0 answers
2k views

SSTP VPN connects, then disconnects

I'm trying to setup an SSTP VPN on Windows Server 2012 which works fine when I connect from the same subnet as the RAS server but does not work when I configure PAT or when I try to route the traffic ...
user avatar
  • 11
0 votes
1 answer
21k views

Error 0x8007274C connecting via SSTP VPN to Windows 2008r2 server

I'm setting up a VPN using a self-signed certificate. My certificate is was generated on the server and is installed on the server. It shows up in the MMC console under "Certificates (Local Computer) /...
user avatar
  • 425
0 votes
1 answer
451 views

Configuring SSTP VPN server on Win2008r2 when server is at a dynamic dns address

I would like to install an SSTP VPN server on a Win2008r2 server that I use for personal purposes (not using Active Directory). I will have 3 or 4 of my computers and other mobile devices connecting ...
user avatar
  • 425
0 votes
1 answer
2k views

Windows Server 2008 R2 - RAS SSTP - HTTP 503 Service is unavailable

I have a Windows Server 2008 R2 machine that has the following configuration: It's a domain controller It runs IIS and serves the Default Website with HTTP bindings 0.0.0.0:80 and [::]:80 and with ...
user avatar
  • 2,251
0 votes
2 answers
5k views

Why can't I change the sstp vpn's port

I'm trying to change sstp vpn's port by changing the value of HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\SstpSvc\Parameters\ConfigStore\ ListenerPort key of my registry but when I change it ...
user avatar
0 votes
1 answer
504 views

Correctly setting up SSTP on Amazon EC2 Server 2008 Domain Controller

I have successfully setup up a VPN connection to an EC2 instance of Windows Server 2008 using SSTP. But the setup seems a little hacked together and needs some tweeking. My first problem/question is ...
user avatar
  • 383
1 vote
3 answers
4k views

Setting up a VPN on Windows 2008 R2, should I use PPTP or SSTP?

I'm setting up a VPN test server, on Windows 2008 R2. I seem to remember that PPTP isn't ideal, as on a Cisco firewall you need to allow quite a large range of ports open (with the GRE protocol too?) ...
user avatar
  • 527
9 votes
2 answers
27k views

SSTP client disconnects shortly after successfully connected to VPN

I'm successfully authenticating and connecting to a SSTP VPN (on windows 2008) from my windows 7 machine, but for some reason, the connection is disconnected about a 1-2 seconds after it's established....
user avatar
0 votes
1 answer
249 views

Have some questions about setting up a VPN to my private cloud servers

TLDR: I wish to VPN to our cloud servers. Is there any free VPN server software that runs on W2K8? No, I don't want to : Download 3rd party software for the -clients- (We want to use the built in VPN ...
user avatar
  • 6,328
3 votes
2 answers
18k views

Internet Explorer not working after establishing a VPN connection

I have a problem which is constantly appearing on each Windows 7 computer I'm using whenever I establish a VPN connection. The problem appears only if using a proxy server for Internet access; it ...
user avatar
  • 68.2k
3 votes
2 answers
2k views

SSTP on Windows 2008 cannot ping in either direction

I have the following setting going on. Server: Configured windows 2008 server as AD, DHCP, DNS, CA and RRAS. To make long story short, RRAS can accept SSTP connection and clients get connected fine. ...
user avatar
2 votes
1 answer
2k views

Win 2008 R2 SSTP Certificate

I have a Win 2008 R2 server running on AWS EC2 and need the ability to VPN to it. PPTP isn't an option given EC2 firewall restrictions (no GRE routing). I am planning to setup SSTP and it is my ...
user avatar
  • 163
0 votes
3 answers
1k views

Shared folders not available when connected to Windows Server 2008 R2 via SSL VPN

When a user(from a WAN/Windows 7 Professional desktop) is connected via SSTP/SSL VPN, shared folders are not available. But if the same user logs in via within LAN/office-PC, gets to see all the ...
user avatar
  • 151