Need help creating a VPN through a firewall

[Matthew]

Hello,

We've got an SBS2003 server. We're not using ISA. We've got a Sonicwall
TZ170. Can anyone tell me what I have to configure in order to get a VPN
working? I want to be able to create a VPN just from staff's home
computers, and I need to be able Remote Desktop into the server from home.
I used to be able to Remote Desktop to the server from home, without ever
making the VPN connection, but for some reason cannot do that now. I can
Remote Desktop connect from within the LAN.

Our server has two NICs. We have a static IP address. The people who
installed our system have the router connecting to the Sonicwall. The
Sonicwall connects to our hub, as well as to our server. And the server
connects to the hub. I'm not sure why it's configured this way.

We're a nonprofit, very strapped for cash, so we're trying to figure this
out ourselves.

Many many thanks, in advance!

Matthew

[Merv Porter [SBS-MVP]]

Hi Matthew,

More questions thatn answers I'm afraid...

+ So, on your network, you have both the Sonicwall and an additional router
(which isn't a router-modem or just a broadband modem)? If so, could you
please give us the make/model of that router?
+ Are there any wireless devices?
+ Which NIC on the SBS connects to the Sonicwall? (Internal NIC or
external NIC)
+ Which NIC on the SBS connects to the (hub)? (Internal NIC or external
NIC)
+ Please post the results of an ipconfig /all for the SBS server.
+ When did you stop being able to RDP into the server?
+ With SBS 2003 your staff can use RWW to directly access their
workstations on the LAN. Is there a reason that a VPN is needed?
+ Do you have the passwords for the Sonicwall and the additional "router"

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mappleNOS...@inch.com> wrote in message
news:eUABCRN5...@TK2MSFTNGP02.phx.gbl...

[Matthew]

Thanks for the questions!

1. Sorry, we have the Sonicwall, and the other device is just the broadband
modem, I used the wrong term.
2. There is a wireless router, also connected to the network, to serve as an
access point. It's secured.
3-4. I believe it's the external NIC that connects to the Sonicwall (the
NIC's on a card), and the internal NIC (seems to be on the motherboard)
connects to the hub.
5. See below
6. I think I might have lost RDP (ability to make a Remote Desktop
connection?) after I tried running Sonicwall's VPN wizard. I thought that I
undid any changes that I'd made.
7. All of our data is kept on the server. So if they could access their
workstation, it's like a PC-Anywhere kind of thing? Would that be better
than simply retrieving files from the server, working on them at home, and
them putting them back on the server?
8. Yes I have a password for the Sonicwall, and have perused its settings a
bit. The other "router" is simply our ISP's broadband modem.

IPCONFIG /ALL:

Windows IP Configuration

Host Name......................: sai-svr
Primary Dns Suffix.............: SAI-INTL.LOCAL
Node Type......................: Unknown
IP Routing Enabled.............: Yes
WINS Proxy Enabled.............: Yes
DNS Suffix Search List.........: SAI-INTL.LOCAL

Ethernet adapter Server Local Area Connection:

Connection-specific DNS Suffix..:
Description.....................: HP NC7781 Gigabit Server Adapter
Physical Address................: 00-14-C2-60-20-72
DHCP enabled....................: No
IP Address......................: 192.168.16.3
Subnet Mask.....................: 255.255.255.0
Default Gateway.................:
DNS Servers.....................: 192.168.16.3
Primary WINS Server.............: 192.168.16.3

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix..:
Description.....................: HP NC7771 Gigabit Server Adapter
Physical Address................: 00-15-60-8A-E8-B8
DHCP enabled....................: No
IP Address......................: 192.168.1.2
Subnet Mask.....................: 255.255.255.0
Default Gateway.................: 192.168.1.1
DNS Servers.....................: 192.168.16.3
NetBIOS over Tcpip..............: Disabled

Thank you so much for your help!!!

Matthew Applebaum

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:%23ApzJqN...@TK2MSFTNGP04.phx.gbl...

[- SBITS.Biz Support@removethis.sbits.biz Russ - SBITS.Biz (MCP SBS)]

Not to step on Mervs toes:
But I hope you understand that Remote Web WorkPlace and VPN are two
different things...
To make things clear (Sorry for doing this, but you will get confused if
you miss understand the difference between the two)

Definitions:
VPN think of yourself hooking Physically with a Wire to your network at work
RWW think of Remote Control like PC anywhere to your Computer at work.

PORTS Needed:
VPN on the SonicWall you need to Open 1723 (Create a Rule and allow it to
your SBS Box)
RWW 443 and 4125 Rule forwarded to your SBS Box
Additional Rules 25 for mail and 444 for direct accesss to companyweb.
Then you mention RDC, now do you mean Dirrect Connection to the SBS box
Withought the web Interface?
if so then you are talking Port 3389 (But I still think you are talking RWW
wich is Port 443 and 4125)

Side Note:
Next like Merv asked Do you really need a VPN connection or a HTTPS or RWW
connection.
(RWW IMO is more Secure)

RWW:
For RWW you need to Run CIECW Check Boxes for REMOTE Web Access, Create a
FQDN (Fully Qualified Domin Name) Certificate.
(Meaning if you Ping that Domain, it responds with your External IP) and the
Ports 443 and 4125 rules forwarded to your SBS box.

VPN:
For VPN you need to run the Network Connection Wizard (Next to the CEICW
Wizard.) Again a FQDN and the Proper DHCP Server Listed.
In addition Each person neeeds to be a member of the Remote Access, (You can
run the Remote access template on them)
and they need to download (For Ease) the SBSPackage.exe
Located Locally at https://Server/Remote/sbspackage.exe
\\server\ClientApps\Connection Manager\sbspackage.exe
Remotely https://ExternalIP/Remote/sbspackage.exe or
htps://server.domain.com/remote/sbspackage.exe

Are all those conditions Met?
Russ

--
Russell Grover
Microsoft Certified Small Business Specialist.
MCP, MCPS MCNPS, (MCP-SBS)
Remote SBS2003 Support Available
MSN Messenger
Support @ SBITS.Biz
http://www.SBITS.Biz
Search for your SBS2003 answers at:
http://groups.google.com/group/microsoft.public.windows.server.sbs?lnk=lr&hl=en

"Matthew" <mappleNOS...@inch.com> wrote in message

news:eHw8wLO5...@TK2MSFTNGP06.phx.gbl...

[Matthew]

Thank you, this is a lot of great information. I will attempt these
configurations when back in the office on Monday.

Maybe I'm being old-fashioned in my preference for VPN over RWW, but if it's
more secure then we'll use RWW. The only problem I see is that it requires
users to leave their workstations on, right? What if their workstation is
not on?

Again, thanks for your help!

Matthew

"Russ - SBITS.Biz (MCP SBS)" <Russ - SBITS.Biz (MCP SBS)
Sup...@REMOVETHIS.SBITS.Biz> wrote in message
news:uI9TTuO5...@TK2MSFTNGP04.phx.gbl...

[Merv Porter [SBS-MVP]]

Much of this echo's what Russ has said...

> 7. All of our data is kept on the server. So if they could access their
> workstation, it's like a PC-Anywhere kind of thing? Would that be better
> than simply retrieving files from the server, working on them at home, and
> them putting them back on the server?

Absolutely. Less of a security risk, less of a virus/trojan risk, less
chance of soemthing getting deleted from the server, much better speed and
end-user experience. RWW is basically an RDP session to the user's LAN
workstation (just like you want to do on the SBS server).

The ipconfig /all for the server looks good. Here's a visual on how
it's set up:
http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&articleId=74

So, it looks like we need to get around the problems created by the
Sonicwall's VPN wizard . I think setting up a couple of Services and rules
will work.

Although I've not played a lot with Sonicwall's, I believe what you need to
do is set up (or open) 2 firewall rules: one for HTTPS (sometimes called
SSL) on port 443 and one for RWW access on port 4125. Then set up another
rule for allowing RDP traffic into the SBS server.

Sonicwall has a good online demo for it's Sonic OS. You can play with it
instead of experimenting with your real router until you get used to the
interface.

Sonic OS demo
http://sonicos-standard.demo.sonicwall.com/main.html

Access the router interface and then:

---------------------------------------------
ADD FIREWALL SERVICES
Firewall | Services | Add

+ Add Service for Remote Web Workplace
Name: RWW
Port Range: 4125 - 4125
Protocol: TCP(6)

+ Add Service for RDP to SBS server
Name: RDP
Port Range: 3389 - 3389
Protocol: TCP(6)

----------------------------------------------
ADD FIREWALL RULES
Firewall | Access Rules | Add

+ Port 443 Firewall Rule
Allow
Service: HTTPS
Source: WAN | *
Destination: LAN | 192.168.1.2 | 192.168.1.2
OK

+ Port 4125 Firewall Rule
Allow
Service: RWW
Source: WAN | *
Destination: LAN | 192.168.1.2 | 192.168.1.2
OK

+ Port 3389 Firewall Rule
Allow
Service: RDP
Source: WAN | *
Destination: LAN | 192.168.1.2 | 192.168.1.2
OK
-----------------------------------------------

Then on the SBS server, Server Management | TO DO List | Connect to the
Internet. This is called CEICW (Configure Email and Internet Configuration
Wizard. Run this, enable the firewall, make sure that Terminal Services and
then RWW (on the next screen) are selected, create the Web Server
Certificate and finish CEICW. You can accept all the values that are
already filled in for the network setup and Email screens. It's just TS,
RWW and the Web certiicate you're interested in at this point.

CEICW Walkthrough (Andy Goodman)
http://www.12c4pc.com/sbs2k3/sbs2k3-n2.htm

Do you have a static public IP address from your ISP or a domain name that
resolves to your server's (dynamic) public IP address? You'll need this to
create the web server certificate for RWW access.

If you have a dynamic IP from your ISP, you may want to set up a free DDNS
account at someplace like www.DynDNS.com.

SBS 2003 DDNS and Email Setup Procedure
http://groups.google.com/group/microsoft.public.windows.server.sbs/msg/be1d68ee2e0ba0d4?hl=en

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mappleNOS...@inch.com> wrote in message

news:eHw8wLO5...@TK2MSFTNGP06.phx.gbl...

[- SBITS.Biz Support@removethis.sbits.biz Russ - SBITS.Biz (MCP SBS)]

Hey Merv that's a great Demo, I hadn't seen that.
I have a couple of Clients that could use that for Training.

Thanks...
Russ

--
Russell Grover
Microsoft Certified Small Business Specialist.
MCP, MCPS MCNPS, (MCP-SBS)
Remote SBS2003 Support Available
MSN Messenger
Support @ SBITS.Biz
http://www.SBITS.Biz

Search for your SBS2003 answer:
http://groups.google.com/group/microsoft.public.windows.server.sbs?lnk=lr&hl=en"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in messagenews:upoCChP5...@TK2MSFTNGP06.phx.gbl...> Much of this echo's what Russ has said...>>> 7. All of our data is kept on the server. So if they could access theirworkstation, it's like a PC-Anywhere kind of thing? Would that be betterthan simply retrieving files from the server, working on them at home, andthem putting them back on the server?>> Absolutely. Less of a security risk, less of a virus/trojan risk, lesschance of soemthing getting deleted from the server, much better speed andend-user experience. RWW is basically an RDP session to the user's LANworkstation (just like you want to do on the SBS server).>> The ipconfig /all for the server looks good. Here's a visual on howit's set up:>http://www.smallbizserver.net/Default.aspx?tabid=266&articleType=ArticleView&articleId=74>> So, it looks like we need to get around the problems created by theSonicwall's VPN wizard . I think setting up a couple of Services and ruleswill work.>> Although I've not played a lot with Sonicwall's, I believe what you needto do is set up (or open) 2 firewall rules: one for HTTPS (sometimes calledSSL) on port 443 and one for RWW access on port 4125. Then set up anotherrule for allowing RDP traffic into the SBS server.>> Sonicwall has a good online demo for it's Sonic OS. You can play with itinstead of experimenting with your real router until you get used to theinterface.>> Sonic OS demo> http://sonicos-standard.demo.sonicwall.com/main.html>> Access the router interface and then:>> ---------------------------------------------> ADD FIREWALL SERVICES> Firewall | Services | Add>> + Add Service for Remote Web Workplace> Name: RWW> Port Range: 4125 - 4125> Protocol: TCP(6)>> + Add Service for RDP to SBS server> Name: RDP> Port Range: 3389 - 3389> Protocol: TCP(6)>> ----------------------------------------------> ADD FIREWALL RULES> Firewall | Access Rules | Add>> + Port 443 Firewall Rule> Allow> Service: HTTPS> Source: WAN | *> Destination: LAN | 192.168.1.2 | 192.168.1.2> OK>> + Port 4125 Firewall Rule> Allow> Service: RWW> Source: WAN | *> Destination: LAN | 192.168.1.2 | 192.168.1.2> OK>> + Port 3389 Firewall Rule> Allow> Service: RDP> Source: WAN | *> Destination: LAN | 192.168.1.2 | 192.168.1.2> OK> ----------------------------------------------->> Then on the SBS server, Server Management | TO DO List | Connect to theInternet. This is called CEICW (Configure Email and Internet ConfigurationWizard. Run this, enable the firewall, make sure that Terminal Services andthen RWW (on the next screen) are selected, create the Web ServerCertificate and finish CEICW. You can accept all the values that arealready filled in for the network setup and Email screens. It's just TS,RWW and the Web certiicate you're interested in at this point.>> CEICW Walkthrough (Andy Goodman)> http://www.12c4pc.com/sbs2k3/sbs2k3-n2.htm>> Do you have a static public IP address from your ISP or a domain name thatresolves to your server's (dynamic) public IP address? You'll need this tocreate the web server certificate for RWW access.>> If you have a dynamic IP from your ISP, you may want to set up a free DDNSaccount at someplace like www.DynDNS.com.>> SBS 2003 DDNS and Email Setup Procedure>http://groups.google.com/group/microsoft.public.windows.server.sbs/msg/be1d68ee2e0ba0d4?hl=en>> --> Merv Porter [SBS-MVP]> ============================>> "Matthew" <mappleNOS...@inch.com> wrote in messagenews:eHw8wLO5...@TK2MSFTNGP06.phx.gbl...>> Thanks for the questions!>>>> 1. Sorry, we have the Sonicwall, and the other device is just thebroadband modem, I used the wrong term.>> 2. There is a wireless router, also connected to the network, to serve asan access point. It's secured.>> 3-4. I believe it's the external NIC that connects to the Sonicwall (theNIC's on a card), and the internal NIC (seems to be on the motherboard)connects to the hub.>> 5. See below>> 6. I think I might have lost RDP (ability to make a Remote Desktopconnection?) after I tried running Sonicwall's VPN wizard. I thought that Iundid any changes that I'd made.>> 7. All of our data is kept on the server. So if they could access theirworkstation, it's like a PC-Anywhere kind of thing? Would that be betterthan simply retrieving files from the server, working on them at home, andthem putting them back on the server?>> 8. Yes I have a password for the Sonicwall, and have perused its settingsa bit. The other "router" is simply our ISP's broadband modem.>>>> IPCONFIG /ALL:>>>> Windows IP Configuration>>>> Host Name......................: sai-svr>> Primary Dns Suffix.............: SAI-INTL.LOCAL>> Node Type......................: Unknown>> IP Routing Enabled.............: Yes>> WINS Proxy Enabled.............: Yes>> DNS Suffix Search List.........: SAI-INTL.LOCAL>>>> Ethernet adapter Server Local Area Connection:>>>> Connection-specific DNS Suffix..:>> Description.....................: HP NC7781 Gigabit Server Adapter>> Physical Address................: 00-14-C2-60-20-72>> DHCP enabled....................: No>> IP Address......................: 192.168.16.3>> Subnet Mask.....................: 255.255.255.0>> Default Gateway.................:>> DNS Servers.....................: 192.168.16.3>> Primary WINS Server.............: 192.168.16.3>>>> Ethernet adapter Local Area Connection:>>>> Connection-specific DNS Suffix..:>> Description.....................: HP NC7771 Gigabit Server Adapter>> Physical Address................: 00-15-60-8A-E8-B8>> DHCP enabled....................: No>> IP Address......................: 192.168.1.2>> Subnet Mask.....................: 255.255.255.0>> Default Gateway.................: 192.168.1.1>> DNS Servers.....................: 192.168.16.3>> NetBIOS over Tcpip..............: Disabled>>>>>>>> Thank you so much for your help!!!>>>> Matthew Applebaum>>>>>> "Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in messagenews:%23ApzJqN...@TK2MSFTNGP04.phx.gbl...>>> Hi Matthew,>>>>>> More questions thatn answers I'm afraid...>>>>>> + So, on your network, you have both the Sonicwall and an additionalrouter (which isn't a router-modem or just a broadband modem)? If so, couldyou please give us the make/model of that router?>>> + Are there any wireless devices?>>> + Which NIC on the SBS connects to the Sonicwall? (Internal NIC orexternal NIC)>>> + Which NIC on the SBS connects to the (hub)? (Internal NIC orexternal NIC)>>> + Please post the results of an ipconfig /all for the SBS server.>>> + When did you stop being able to RDP into the server?>>> + With SBS 2003 your staff can use RWW to directly access theirworkstations on the LAN. Is there a reason that a VPN is needed?>>> + Do you have the passwords for the Sonicwall and the additional"router">>>>>> -->>> Merv Porter [SBS-MVP]>>> ============================>>>>>> "Matthew" <mappleNOS...@inch.com> wrote in messagenews:eUABCRN5...@TK2MSFTNGP02.phx.gbl...>>>> Hello,>>>>>>>> We've got an SBS2003 server. We're not using ISA. We've got aSonicwall TZ170. Can anyone tell me what I have to configure in order toget a VPN working? I want to be able to create a VPN just from staff's homecomputers, and I need to be able Remote Desktop into the server from home. Iused to be able to Remote Desktop to the server from home, without evermaking the VPN connection, but for some reason cannot do that now. I canRemote Desktop connect from within the LAN.>>>>>>>> Our server has two NICs. We have a static IP address. The people whoinstalled our system have the router connecting to the Sonicwall. TheSonicwall connects to our hub, as well as to our server. And the serverconnects to the hub. I'm not sure why it's configured this way.>>>>>>>> We're a nonprofit, very strapped for cash, so we're trying to figurethis out ourselves.>>>>>>>> Many many thanks, in advance!>>>>>>>> Matthew>>>>>>>>>>>>>>>>>>>>

[Matthew]

Hi all, thanks for your help thus far.

I've added the services and rules for RWW and RDP, and the rule for HTTPS.
Ran CEICW. We have a public IP, and the domain name which came up was the
one for our mail server. At home, I connected to our remote directory,
downloaded the connection manager and installed sbspackage.exe. My user
name is in the Remote Web Workplace security group. I even opened 1723.

When I try to Connect to Small Business Server, I get the following error
message:

Unable to establish the VPN connection. The VPN server may be unreachable,
or security parameters may not be configured properly for this connection.
(Error 800) For customized troubleshooting information for this connection,
click Help.

I can, however, Remote Desktop Connection to the server, going to its IP
address.

I cannot telnet to the server via either IP address or its domain name.
When I try to ping the server name, it resolves the IP, but the connection
request times out. Cannot ping the server's IP address, either.

When I connect to ourdomain/remote, I can log in but when I try to connect
to a client desktop, I'm told that Connectivity to the remote computer could
not be established. Ensure that the remote computer is on and connected to
the Windows SBS network. (It is.)

Any suggestions are, as always, greatly appreciated!!!

Matthew

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:upoCChP5...@TK2MSFTNGP06.phx.gbl...

[Merv Porter [SBS-MVP]]

When you ran CEICW, you did select VPN, correct? And then you ran the
Remote Access wizard (Configure Remote Access, just below "Connect to the
Internet" in the To Do List in Server Management), right?

If so, you need to find out how to pass GRE Protocol 47 from your Sonicwall
router to your external NIC. From the online demo, I believe this is
accomplished by:

Firewall | Services | Drill down the list and enable (checkmark) the PPTP
service. This should turn on GRE Protocol 47 as well as open port 1723.

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mapple...@inch.com> wrote in message
news:%23ZPWbZj...@TK2MSFTNGP03.phx.gbl...

[Matthew]

I did select VPN in the CEICW, and then I did run the Remote Access wizard.

And the firewall's PPTP service is already enabled.

Thanks for sticking with me!!

Matt

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:O9cB9Sn5...@TK2MSFTNGP02.phx.gbl...

[Merv Porter [SBS-MVP]]

In the router, in VPN | Settings, delete all policies (these would have
been created by the VPN Wizard you ran originally). You may also have to
uncheck "Enable VPN" in VPN | Settings. (Not sure if this setting is just
for IPSEC or whether it also relates to PPTP VPN) Then look at the
Firewall | Services and see if PPTP is still checked. If it is, reboot the
router (turn it off and on) and make sure the changes stuck. If they did,
try an external VPN again to the SBS server.

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mapple...@inch.com> wrote in message

news:Oszlqdo...@TK2MSFTNGP02.phx.gbl...

[Merv Porter [SBS-MVP]]

Also, in the router, add another Access Rule...

Firewall | Access Rules | Add

Allow
Service: PPTP (from the pull down menu)

Source: WAN | *
Destination: LAN | 192.168.1.2 | 192.168.1.2
OK

This should allow PPTP & GRE Protocol 47 to be forwarded to your SBS
external NIC.

--
Merv Porter [SBS-MVP]
============================

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message
news:OqcEj2o5...@TK2MSFTNGP03.phx.gbl...

[Matthew]

The only VPN policy that was there was the GroupVPN policy; when I try to
delete it I'm told "GroupVPN is the default policy and will not be deleted."

I disabled GroupVPN. I disabled VPN. PPTP was still checked. I couldn't
physically reboot the router tonight, but there's a Restart option under
System, which I tried. After it rebooted, I added the PPTP access rule.

Still no luck.

Tomorrow I will physically reboot the router. Maybe I should rerun the
CEICW and Remote Access wizard? I'd also like to try this from a different
workstation. I'm running Zone Alarm and Avast on mine, would that interfere
with anything?

I'll report tomorrow after rebooting the server and re-running the wizards,
unless there's something else I can try from home tonight?

Again, many thanks!!

Matthew

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:O7hkX$o5GHA...@TK2MSFTNGP06.phx.gbl...

[Matthew]

I don't know if this is pertinent information, but when I access OWA, I get
the warning that the website is certified by an unknown authority.

I wonder if this is also related to why I cannot get any of our three PDAs
to synchronize directly with the Exchange server. Tech suppt of Verizon,
T-Mobile and Sprint (I think they were the third one?) were each unable to
resolve this issue, and the error msg, which I don't have with me now,
seemed to indicate that there was a problem with the phones accepting our
certificate. I followed all instructions and advice I could find on
updating phones' firmware and finding their own ways (and Microsoft's) to
install the certificate on the phone. Perhaps I was doing it wrong.
Perhaps this has nothing to do with the issue at hand.

Also, I cannot ping our server from home, either by IP address or by its
domain name. It resolves the domain name, but the requests time out.

Thanks again!!

Matthew

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:O7hkX$o5GHA...@TK2MSFTNGP06.phx.gbl...

[Merv Porter [SBS-MVP]]

Using Restart from the router menu should be as good as a physical reboot of
the router. And yes, Zonealarm could be a problem. Turn it off during your
VPN testing..

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mapple...@inch.com> wrote in message

news:%23qz$2up5GH...@TK2MSFTNGP06.phx.gbl...

[Merv Porter [SBS-MVP]]

You may have to manually export the certiticate from the server and then
import it into the phones. I haven't got any of these, so maybe someone
else can jump in with set up info.

ActiveSync and Exchange 2003 Issues
http://fluidbits.com/2006/02/16/activesync-and-exchange-2003-issues/

Can't ping the server... Do you mean ping the WAN IP address of the router
or your SBS server's privtae IP address? If the latter, you'll need to get
the VPN working first. If you mean the former, I suspect this is yet
another setting in the Sonicwall (a security feature - make the Public (WAN)
IP stealth). I would put this on the back burner for now.

--
Merv Porter [SBS-MVP]
============================

"Matthew" <mapple...@inch.com> wrote in message

news:%23nsMWzp...@TK2MSFTNGP02.phx.gbl...

[Matthew]

Still doesn't work with Zone Alarm off. I'll rerun CEICW & Remote Access
today.

Thanks,

Matthew

"Merv Porter [SBS-MVP]" <mwport@no_spam_hotmail.com> wrote in message

news:u9yU47t5...@TK2MSFTNGP04.phx.gbl...