Re: How many VPN users windows 2003?
In news:%2311DMq2oIHA.1736@TK2MSFTNGP04.phx.gbl,
Ahmad Sabry <ahmad@omarahmed.info> typed:
> as you reminded me i checked ports in Routing and remote access i
> found '16382" for pptp and "30000" for L2tp, is that real ?or just
> theoretical ?just wanna to make sure.
> i don't know how many cients will connect, it's a copmany which will
> use it as a gateway for thier clients who are in countries behind
> firewalls to make use of VOIP through this gateway located in a
> dedicated host. they have alread everything working but some clients in
> uae can't use
> the service because of restrictions on VOIP solutions.
> any advice ?
> thanks
UAE? United Arab Emerates? Some countries such as China, do have
restrictions with Internet ussage, so I have no idea. If they are connecting
over a VPN, I can't see how a country's filters are able to look inside the
VPN to determine the type of traffic, unless of course they are also
filtering VPN ports which would not allowing them to connect at all.
As for the # of ports, I would think, and hope you would agree, that number
you saw would really be unreasonable and unrealistic. Not sure if
theoretical or not, but for anything more than 10 or 15 users, I would
honestly consider a hardware solution that is designed to handle a large
amount of VPN connections. Windows in my opinion, is really not cut out for
this because of the operating system overhead. Matter of fact, for any of
our clients with 5 or more users in the company and requiring VPN access, we
usually recommend a PIX 501. Larger number of users such as 50 or more we
recommend 506e's.
My advise is a hardware solution.
You can make it easier for them with
an SSL based VPN solution that they won't need a client installed but rather
simply connect to the appliance using a browser and it installs an ActiveX
VPN client app. I worked at one client that used SonicWall's SSL VPN
solution. Not bad, but I would rather use a Cisco solution. I did a search
and found the following link at Cisco. It's something to look in to:
http://www.cisco.com/en/US/docs/security/asa/asa80/getting_started/asa5505/quick/guide/web_vpn.html
I would be curious as to what you decide.
Ace