|
Posted by =?Utf-8?B?bGNhMTYzMA==?= on September 21, 2007, 11:28 am
If you were Registered and logged in, you could reply and use other advanced thread options
will post my findings when they happen, thanks for your help.
"S. Pidgorny <MVP>" wrote:
> When access is denied for the VPN users, what's the corresponding event from
> IAS in the system log?
> What is the port type for the VPN connection policy?
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
> > Flaky was used for lack of a better word at the time. Basically I am
> > having
> > issues with when I create a wirless profile/policy, I find that people are
> > not being able to log to our VPN. When I remove all instances of my
> > wirless
> > setup VPN works like it should. In my research once the conditions are
> > matched, the profile will then be evaluated and then if that matches a
> > connection should occur. Well, the conditions for the two are completely
> > different, so it should know which one to choose, right?.
> > Have you heard of this being a common issue? Please help. Asking me
> > questions about the setup may help me articulate the issue better.
> >
> > "S. Pidgorny <MVP>" wrote:
> >
> >> Define "flaky".
> >>
> >> The order shouldn't matter: policy will apply only if all of the criteria
> >> and profile math the incoming request: group membership, port type, etc.
> >> If users get denied access then you'll see event in the system log on the
> >> IAS and will be able to identify policy in question. If that's the policy
> >> issue, users won't have access at any time 0 which is not "flaky".
> >>
> >> --
> >> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> >> -= F1 is the key =-
> >>
> >> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
> >>
> >>
> >> >I am having issues with adding a wireless remote policy to IAS with an
> >> > existing, working VPN policy. Ever since I created the wireless policy,
> >> > connections to the VPN have been flaky. I am attempting to come up with
> >> > a
> >> > scheme for the conditions. Right now I have groups - domain users for
> >> > the
> >> > vpn, which works great on its own. I have Nas-port type - Wirless -
> >> > 802.11
> >> > and groups - wifi group for the wireless conditions (syntax not exact).
> >> > Which order should they be in, which are the best conditions to use and
> >> > if
> >> > you have any tips on this type of set up please help!!!!
> >>
> >>
> >>
>
>
>
| 
XML site map