Re: Access to network drives for home and roaming users

Pretty well everyone sells SSL VPN these days, either appliance or software.
Its really easy to set up. You might have a look at this:
http://www.microsoft.com/presspass/events/rsa/docs/GartnerSSLVPN.pdf
Hope that helps,
Anthony
http://www.airdesk.co.uk



"Mike D" <MikeD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:98373582-2034-4684-BD68-29893693306F@xxxxxxxxxxxxxxxx
Thanks for your reply, think option 1 is the go, I'd like to leave the
data
in the internal lan and not mov it to the DMZ, can you give me some mroe
info
on option 1?

"Anthony" wrote:

Mike,
All the VPN does is to add a security layer to the remote access, so if
you
don't want to use VPN, the question is, what security do you want to
apply?
Then by the time you add the additional security, you may be thinking
that
the VPN wasn't so bad.
Questions:
- Do you want the data in a DMZ, or do you want them to come straight
through the firewall to your LAN?
- If in a DMZ, how will they authenticate to it?
- How to interact with the data: HTTP, CIFS, FTP etc.?
Options you can consider:
1) An SSL VPN gives a simplified user access to internal resource. From a
user perspective, you could say they had direct access, as they only have
to
authenticate once. In fact they are going through a VPN tunnel.
2) Allow RDP straight through. Impractical in any but very small
environments.
3) Use Terminal Services with remote access. For file access as distinct
from applications this is similar to the SSL VPN.
4) Anything with the content in a DMZ gets very complicated as to how you
are going to authenticate it with LAN users. You can use IIS with WebDAV
and
SSL to give file and folder access, but you need some way to authenticate
the users. You don't want to go through to the DC on the LAN, so you have
to
come up with a way of synchronizing usernames to a DMZ AD.
Hope that helps,
Anthony
http://www.airdesk.co.uk




"Mike D" <MikeD@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:6471DDBA-BA31-460B-98FF-1D5B40E15F8B@xxxxxxxxxxxxxxxx
Hello, I have a scenario I'd like to put out and see if anyone can
help. I
have a windows 2003 R2 network with an internal and perimeter network,
the
internal is fully windows 2003 and all users have access to mapped
drives
on
the file server, we also have exchange 2007 server. In the perimeter
network
we have a frontend webserver hosting a public site and another box
hosting
the edge exchange 2007 server.

I want to achieve simple remote access to user from home or roaming
with
laptops without the need for VPN's, Exchange is easy and has been setup
for
OWA or the outlook client over HTTP, the problem I have is access to
the
file
system and specifically the network drives they have access to. I'd
like
to
give them access to certain network drives or folders somehow without
mapping
them over a VPN. I've thought about ftp etc but I figure there must be
plenty
of need for this out there and other companies must have easily
achieved
it
with it being pretty much a microsoft shop....... so I want to see how
others
do it :) can anyone assist or provide advice.

Thanks







.

Relevant Pages

  • Re: Access to network drives for home and roaming users
    ... All the VPN does is to add a security layer to the remote access, ... Do you want the data in a DMZ, or do you want them to come straight ... through the firewall to your LAN? ... have a windows 2003 R2 network with an internal and perimeter network, ...
    (microsoft.public.inetserver.iis.security)
  • DMZ Advice
    ... I am in the process of redesigning certain parts of my network. ... As I want to impliment a L2TP VPN on Windows Server 2003 and have a protected IIS site available from the the internet, I am looking at implimenting a DMZ. ... with the only route through the DMZ into the internal network ...
    (microsoft.public.windows.server.networking)
  • Re: Accessing DMZ while on VPN.
    ... Networking, Internet, Routing, VPN Troubleshooting on http://www.ChicagoTech.net ... How to Setup Windows, Network, VPN & Remote Access on http://www.HowToNetworking.com ... I'm having some problems getting proper access to the DMZ for people ...
    (microsoft.public.windows.server.networking)
  • Re: Cheapest Firewall with VPN and DMS port?
    ... I didn't see where you mentioned I could get my VPN also. ... outside, a VPN network subnet, and another subnet for DMZ. ... > traffic from the Homeport to the Workport and I only allow port 80 to the ...
    (comp.security.firewalls)
  • Re: SSL VPN
    ... Can also support IPSec besides SSL VPN ... Currently we have 100+ home users who connect to our VPN gateway ... We also have a Cisco ASA as a perimeter firewall on our network on ...
    (Security-Basics)