[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Web openvpn.net

Re: [Openvpn-users] OpenVPN and ISA proxy

  • Subject: Re: [Openvpn-users] OpenVPN and ISA proxy
  • From: Ido van Verseveld <ivverseveld@xxxxxx>
  • Date: Thu, 23 Aug 2007 16:31:00 +0200

We have configured the openvpn server to listen on tcp port 443 (normally HTTPS). Then you can configure your client to use the proxy and connect to tcp 443. I tested it once when i was on training in a building where they use also an ISA proxy.
In case u have 1 outside ip and your https port is already in use, openvpn 2.1 has the solution for that:

# Port sharing: redirect incoming HTTPS connections to different process
port-share <https-server-ip> 443


Op donderdag 23-08-2007 om 16:14 uur [tijdzone +0200], schreef Julien Kauffmann:
Prasanna Krishnamoorthy a écrit :
> On 8/23/07, Julien Kauffmann <julienkauffmann@xxxxxxx> wrote:
>> Does OpenVPN support ISA ? And if it does, what settings should I change ?
> Squid proxies only port 80. ISA block all ports. With default OpenVPN
> settings, you'll need to allow outgoing port 1194 UDP on the ISA
> firewall.
> Prasanna.

Thanks for your fast answer.

Unfortunately I have no control over the ISA proxy. All I have, is a
computer with local admin. privileges and the ability to configure
OpenVPN client (on Windows).

OpenVPN provides parameters to connect trough proxies, but I can't find
working settings for a LAN behind an ISA proxy. I think it has something
to do with the authentication method used by ISA. On the logs, OpenVPN
says something about a "digest" authentication method but I don't really
understand what it means. (I have no access to the log files at this
time, that's why I do not post them)


Julien Kauffmann.

This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >>  http://get.splunk.com/
Openvpn-users mailing list
Met vriendelijke groet,

Ido van Verseveld
Internet Specialist
IJsselland Ziekenhuis
Tel    :010-2585801
E-mail :ivverseveld@xxxxxx