RE: quarantine vpn clients

From: Jim Harrison (ISA) (jmharr_at_microsoft.com)
Date: 03/28/05

  • Next message: Watson, Michael: "RE: quarantine vpn clients" 
    Date: Mon, 28 Mar 2005 11:34:43 -0800
To: "Matt Bazan" <Mbazan@onelegal.com>, <focus-ms@securityfocus.com>

    The best answer to a "do it all at the client" question is answered with
    a combination of RQS/RQC scripts:
    http://www.microsoft.com/isaserver/techinfo/guidance/2004/vpn.asp
    ..and
    http://www.microsoft.com/downloads/details.aspx?FamilyId=3396C852-717F-4
    B2E-AB4D-1C44356CE37A&displaylang=en

    ..as well as judicious application of CM:
    http://www.microsoft.com/downloads/info.aspx?na=22&p=2&SrcDisplayLang=en
    &SrcCategoryId=&SrcFamilyId=&genscs=&u=%2fdownloads%2fdetails.aspx%3fFam
    ilyID%3d93fd20e7-e73a-43f6-96ec-7bcc7527709b%26DisplayLang%3den

    Jim Harrison
    Security Business Unit (ISA SE)

    -----Original Message-----
    From: Matt Bazan [mailto:Mbazan@onelegal.com]
    Sent: Thursday, March 24, 2005 2:41 PM
    To: focus-ms@securityfocus.com
    Subject: quarantine vpn clients

    Hello,
            Anybody out there using quarantining/policy enforcement
    solutions with MS' vpns? We run ISA 2004 and I see they have a
    quarantine feature with limited functionality. I'd like something that
    can be used to enforce a security policy on the client side. Ideas?
    Thanks.

    ------------------------------------------------------------------------ 

    ---
------------------------------------------------------------------------
---
---------------------------------------------------------------------------
---------------------------------------------------------------------------
  • Next message: Watson, Michael: "RE: quarantine vpn clients"

    Relevant Pages

    • Re: Internet access with local PPP links
      ... Extract all files to a folder on ISA server ... This newsgroup only focuses on SBS technical issues. ... if I disable the ISA client but leave IE setup to use the ... | server at port 8080 then the user can still surf the Internet fine. ...
      (microsoft.public.windows.server.sbs)
    • Re: Is this a 3-Leg Perimeter scenario?
      ... the same configuration as I had it originally before upgrading to ISA 2004 ... No PersisentRoute enrty on the clients; no firewall client disabling; no IE ... using IE to access the FTP. ...
      (microsoft.public.windows.server.sbs)
    • RE: RWW not accessible over web
      ... Can the client access Internet web sites when you ... Extract all files to a folder on ISA server. ... 'Microsoft Firewall' service. ...
      (microsoft.public.windows.server.sbs)
    • RE: Real Player Working with SBS 2003
      ... > and no problem in accessing the internet, please double confirm the ISA ... > setting on both the ISA server and client computer. ... > Microsoft CSS Online Newsgroup Support ... > This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)
    • RE: Real Player Working with SBS 2003
      ... It seems you did not check my suggestion about ISA policy and realplayer ... setting on both the ISA server and client computer. ... This newsgroup only focuses on SBS technical issues. ...
      (microsoft.public.windows.server.sbs)