Questions tagged [sstp]

Secure Socket Tunneling Protocol (SSTP) is a form of VPN tunnel that provides a mechanism to transport PPP or L2TP traffic through an SSL 3.0 channel

24 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
3 votes
0 answers
2k views

Scheduled RasMan connection to SSTP VPN fails only at night

Background I have an SSTP VPN with a self-signed certificate. It's running on a physical instance of Server 2008 R2 on our LAN. Three off-network workstations are scheduled to connect to the VPN "at ...
Eric Eskildsen's user avatar
2 votes
0 answers
730 views

VPN client has severe intermittent connectivity issue with Windows 2008 RRAS server, but NOT with the other remote servers

I have a Windows 2008 server setup in the cloud as a RRAS running VPN access and NAT. It is joined to a domain controller also running in the cloud. A Windows 7 VPN client connects using SSTP to the ...
emfurry's user avatar
  • 121
1 vote
0 answers
4k views

Is it possible to hack a server with a SSTP_DUPLEX_POST request?

How is it possible to use the method : SSTP_DUPLEX_POST and the url : /sra_{BA195980-CD49-458b-9E23-C84EE0ADCD75}/ to hack a server ? I have this request in my logs from a well known malicious IP ...
Frédérique's user avatar
1 vote
0 answers
416 views

SSTP VPN works but no Internet connection on Ubuntu

I've established SSTP VPN client on my Ubuntu connecting to SSTP VPN server. I'm using http://sstp-client.sourceforge.net/ SSTP VPN client. And with this network manager plugin https://github.com/...
croraf's user avatar
  • 109
1 vote
0 answers
1k views

Self-signed certificate for SSTP VPN server

I'm developing a custom VPN solution that needs to support SSTP for Windows clients. For this, the SSTP specifications (and Windows) require my server to authenticate itself using a certificate during ...
Markus A.'s user avatar
  • 419
1 vote
1 answer
591 views

HAproxy.cfg syntax: how to recognise SSTP other than by SNI

I've recently managed to configure HAproxy.cfg to run HTTPS and SSTP on the same port, and can recognise some website traffic by SNI. However, as I have multiple domains I would prefer to recognise ...
banjo67xxx's user avatar
1 vote
1 answer
2k views

How to configure HAproxy with SSTP and HTTPS

I'm using a MikroTik router with SSTP, and I have a Fedora server running httpd with HTTP and HTTPS, but I only have a single IPv4 address from my ISP. I currently have SSTP working on port 444, but ...
banjo67xxx's user avatar
1 vote
0 answers
5k views

SSTP VPN Certificate Revocation issue

I have Windows 2012 Server with RRAS set up on it to allow clients to connect via SSTP VPN. I have correctly set up the certificate on the server and issued it to clients. Whilst my clients that ...
Dee Kay's user avatar
  • 11
1 vote
0 answers
2k views

SSTP VPN connects, then disconnects

I'm trying to setup an SSTP VPN on Windows Server 2012 which works fine when I connect from the same subnet as the RAS server but does not work when I configure PAT or when I try to route the traffic ...
Enieuw's user avatar
  • 11
1 vote
0 answers
2k views

SSTP VPN Windows Server 2008 - Clients can't access Internet Through the VPN

I have setup a SSTP VPN connect and it is assigning the local IP address to the client, e.g. 192.168.0.10. The server has two NICs, private and public. The private is on a 10.180.x.x IP address and ...
Luke's user avatar
  • 183
0 votes
0 answers
544 views

Securing Windows Server NPS/SSTP

Looking at our NPS logs I see we're getting hammered; some online actor is doing a brute force on various login names and passwords. In general this isn't an issue... yet. It doesn't appear that a ...
MBender's user avatar
  • 381
0 votes
0 answers
43 views

VPN into work network - Suggestions, Concerns

I have been tasked to setup a vpn into our company. We have a single windows 2016 server that is acting as everything. A DC, AD, File Server, Web Server, SQL Server, and now perhaps a VPN Server. I ...
changedsoul's user avatar
0 votes
1 answer
552 views

IKEv2 certificate error but SSTP successfully connects Windows 10 pro / Windows Server 2019

I'm using Windows server 2019 (installed roles: AD DC, CA, DHCP, DNS, IIS, VPN). my client is Windows 10 pro. before installing the Online responder role and having a CRL server, IkEv2 was working, ...
user avatar
0 votes
1 answer
2k views

SSTP VPN connection fails after updating / removing an IIS certificate

After I removed / updated an IIS certificate, I am unable to maintain an SSTP VPN connection with the server. As far as I recall the certificate was NOT used for authentication. Users authenticate ...
Vega4's user avatar
  • 131
0 votes
0 answers
733 views

MS SSTP Server with multiple certificates / hostnames

We currently have an SSTP server (running on Windows Server 2008 R2 but it is being migrated to Windows Server 2016). At the moment, the server is configured using a wildcard certificate for one of ...
MBender's user avatar
  • 381
0 votes
1 answer
1k views

Redirect SSTP traffic from Ubuntu Apache2 server to internal Windows Server

So this weekend i have been working on migrating my apache2 server to a docker container which i have no issues with. I currently have a windows server with SSTP and Exchange 2016 both using port 443 ...
xR34P3Rx's user avatar
  • 197
0 votes
0 answers
1k views

SSTP VPN on Windows Server 2016 works in LAN but not from WAN

I was setting up SSTP VPN on Windows Server 2016 at home using this tutorial. This works using a LAN client with Windows 10. The eventlog on the client shows: The user xxx has established a ...
Ironori's user avatar
  • 111
0 votes
0 answers
844 views

How to create site-to-site VPN from CentOS Server to Windows Server

For a small business: at one site is windows 2012 server, (with ssl certificate), already running as a SSTP VPN Server. At a remote site, is a live-to-public CentOS webserver running CFS. ...
Mtl Dev's user avatar
  • 887
0 votes
1 answer
5k views

VPN SSTP windows client can not ping or connect to VPN server but it can talk to every other PC on the local LAN that VPN server is on

So I have an SSTP (with native Windows client) working fine in a sense. My windows client's local IP is 192.168.10.11 , so its local network is: 192.168.10.x The Remote VPN server is behind a router ...
htfree's user avatar
  • 481
0 votes
0 answers
615 views

Deploying SSTP VPN on Windows 2012 - How to route packets to other servers?

I've finally managed to deploy an SSTP VPN between my Windows 2012 (non R2) server and Windows 7 client. It's amazing how much easier it work with a real certificate and avoiding the self-signed ...
Gup3rSuR4c's user avatar
0 votes
1 answer
619 views

Correctly setting up SSTP on Amazon EC2 Server 2008 Domain Controller

I have successfully setup up a VPN connection to an EC2 instance of Windows Server 2008 using SSTP. But the setup seems a little hacked together and needs some tweeking. My first problem/question is ...
John R's user avatar
  • 393
-1 votes
1 answer
743 views

Install SSTP server on Windows 2008 (not R2). Possible?

I am trying to install RRAS on Windows 2008 (original Vista kernel version, not R2) in order to implement SSTP but after I configure RRAS, there is nothing in the security settings for setting the ...
zwickedstepdad's user avatar
-1 votes
1 answer
2k views

SSTP SERVER without certificate check

Is it possible to make a SSTP server where clients don't need certificates? If I want to use linux or microtik routeros as a client, do I have to do something extra in the SSTP server (Windows Server ...
sazu1976's user avatar
-2 votes
2 answers
304 views

Networking VPN expert out there? Should Remote VPN "Client" be pingable/reachable FROM the VPN server?

I've setup VPN connections with different servers today and all worked, in one direction, from VPN client TO VPN SERVER. BUT I could NOT whatever I tried access ports/services on my 'connected' VPN ...
htfree's user avatar
  • 481