How to allow access to external VPN network via PPTP

Hi guys, this is probably a simple one but i do not have much firewall experience so any help is appreciated.
We would like to have the ability to connect to a VPN of a business we recently acquired. When connecting to it directly from the Internet (no firewall), it is accessible. However, behind our firewall, there is no access. We are using Cisco ASA 8.2 (2)
Currently, we have an entry as follows:
object-group service PPTP tcp
port-object eq pptp
access-list inside_access_in extended permit tcp any host object_name object-group PPTP
Can someone please advise what else is required to complete this as i am unsure of what else is required? Basically, we want any device within our network to be able to access the VPN via PPTP.
Your help is appreciated
Regards,

Hi Karsten, thanks for the reply.
After enabling the PPTP inspection, will my below entry work? What about GRE?
object-group service PPTP tcp
port-object eq pptp
access-list inside_access_in extended permit tcp any host object_name object-group PPTP
Thanks!

Similar Messages

How do I access an external hard drive attached to an Airport Extreme using the Finder's "Go to the folder" feature?

How do I access an external hard drive attached to an Airport Extreme using the Finder's "Go to the folder" feature?
I have an external hard drive attached to my Airport Extreme and I can access it just fine through Finder. I would like to be able to keyboard navigate to it in an efficient manner. I tried to use the "Go to the folder" feature but was unable to.
I had tried dragging the drive to the Network folder but the shortcut it created does not lead to the drive's contents...it seems to lead right back to the parent directory:
I hope I explained the question well. Thank you for all of your help and time in tending to my inquiry.

Cant you set up "back to my mac" then go to finder preferences and put a check mark under everything under the shared location. Also set up back to my mac on your airport extreme.

How do I access my external drive over the web with my iPhone. The drive is attached to my Time Machine.

How do I access my external drive over the web with my iPhone. The drive is attached to my Time Machine. I am new to Apple and am trying to get all my stuff working together.

This is not a supported feature of iPhone or Time Capsule.

How do I allow access to non admin network users to disk volume?

I would like to allow access to a specific volume (disk) on one of our networked macs (Mac1) to all users. I've set user accounts on Mac 1 for all network users. These users are "regular" users, not admin. They can access this disk (and all others on Mac1) if I log in as Admin set Users to Admin. If I do this, then users have access to ALL data on all disks. If I do not, leaving them as "regular" users, when they log in they only see public folders. How can I allow access to the one disk volume without making network users admin? I tried changing various settings for the volume in Finder Info (everone else=read/write; ignore permissions) with no luck.
Thanks
iMac, ibooks, G5, Tibook Mac OS X (10.4.4)

Your observations are correct - by default, an "admin" user connecting over AFP can choose from available "volumes" (default) or "shares", whereas a non-admin user can only mount "shares".
By default, the only "shares" on an OS X client machine are the users' "Public" folders, and unlike pre-OS X Macs, it isn't easy to configure your own share points. Apple's official statement is that users wanting this functionality should buy OS X Server.
However, it is possible to create an arbitrary share point using 3rd party software called "SharePoints" (donationware). I have never used it, but it seems to be well regarded. Alternatively, you can do it manually following the instructions in this hint & comments (especially apw8's):
http://www.macosxhints.com/article.php?story=20011108161839416
Once the external drive (or folder on the external drive) is configured as a share point, it should be possible for non-admin users to select and mount it once they connect over AFP.

How to allow access only from certain IPs?

I have Portal Server 6.0 on Sun ONE Web Server and want to allow access to it only from certain IPs, i.e. if my IP differs from predefined, then access is denied (no page is opened).
How can I implement this with minimal efforts?
Thanks in advance!

Where did you set the ACLs?
When webclients connect direct to the portal/ids this is pretty straight forward using htttpacl files. When SRAP GW's are used for Internet portal access the web or app-server never sees the client IP thus those ACLs don't get applied.
Am I missing something (won't be the first time... or the last:-)
Cheers,
-psr

HT2426 how do i access my external hard drive connected to my time capsule 4th gen

how do i acess my external hard drive (wd) that is connected to my time capsule using a macbook pro?

Make sure that the drive has been formatted correctly to work with the Time Capsule.
That means a format of Mac OS Extended (Journaled)....highly recommended.....or FAT32.
Once this is checked, open Macintosh HD > Applications > Utilities > AirPort Utility
Click on the Time Capsule icon, then click Edit
Click the Disks tab at the top of the screen
If the USB port on the Time Capsule can supply enough power to the hard drive, you will see the name of the drive displayed in the window, per the example below:
If you have the correct format on the drive, and it does not appear, this is an indication that the USB port on the Time Capsule (which is under powered), does not have enough power to work with your hard drive.......even if the hard drive has its own power supply.
In this case, you will need to use a powered USB hub with the Time Capsule to provide enough current for the hard drive.
Now you should be able to access the drive using the Finder to mount it on the desktop.

How to allow access to winrs for non-admin user?

I have Windows Server 2012 (and Server 2008, but it is next priority) to monitor it using txwinrm. txwinrm library internally is using WinRS protocol. I have to monitor it using least privileged user, but don't know how to configure access for him.
All I managed to do - is to configure remote Powershell session for my user, but it's look like that winrs and powershell sessions have different security descriptors:
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential Administrator $pwd) -ScriptBlock { 2 + 2}
# gives 4
Invoke-Command -ComputerName 192.168.173.206 -Credential (credential lpu1 $pwd) -ScriptBlock { 2 + 2}
# gives 4
winrs -r:192.168.173.206 -u:Administrator -p:$pwd 'powershell -command "2+2"'
# gives 4
winrs -r:192.168.173.206 -u:lpu1 -p:$pwd 'powershell -command "2+2"'
# Gives Winrs error: Access is denied.
Configuration for my user is following:
(Get-Item WSMan:\localhost\Service\RootSDDL).value
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1141)S:P(AU;FA;GA;;;WD)(AU;SA;GWGX;;;WD)
(Get-PSSessionConfiguration -name Microsoft.Powershell).SecurityDescriptorSddl
# O:NSG:BAD:P(A;;GA;;;BA)(A;;GA;;;S-1-5-21-3231263931-1371906242-1889625497-1149)S:P(AU;FA;GA;;;WD)(AU;SA;GXGW;;;WD)
(In each security descriptor my user is given general access to protected object).
So what security descriptor should I set to make my winrs query work for non-admin user?

Hi Bunyk,
I can not recreate the erroe you posted, and please also post the screenshoot in your convenience.
I tested with a non-domain user but has the local admin permission of the remote computer, and this worked, before running the remote cmdlet in powershell, I also configured the TrustedHosts.
In addition, the access denied could be also caused to the Protocol Filtering on the remote server, for more detailed information, please refer to this thread:
winrs error:access is denied
I hope this helps.

How to allow access from LAN to server on LAN using external FQDN? (Outlook web access issue)

I may have phrased the topic not too clearly, but I have an external domain name of mail.company.com , I want my users INSIDE the company be able to also get to https://mail.company.com , currently they cannot (nothing loads, looks to me as if firewall simply drops it) and I'm drawing a blank on how to get this done. Externally this works fine so if you're outside the company you can load up OWA just fine since my NAT rule translates the external IP to internal IP, but something is blocking this from the inside.
I have an ASA 5510.
If you can just sent me on the right path with theory I'll figure it out on my own, I don't need exact steps, but I must be thinking of this wrong as I'm not getting anywhere.

Hello Martin,
Maybe what is happening is that the DNS entry is pointing to the public IP address of the server, so it could be that the internal users are forwarding the traffic to the public IP address of the server and the ASA will drop the packet since the hosts are going to try to contact the server from the inside when actually there is a NAT rule that translate the internal server on the outside with a public IP. The traffic will try to contact that server going to the outside interface, but the ASA will notice that the connection was initiated on the inside interface, so it will refuse the connection.
There is a solution for this issue. You can create a static NAT rule that matches le that translate the internal host to the public IP address, in this case, instead of -inside,outside-, the rule is going to be -inside,inside-.
For example:
Let`s say that there is a static NAT that match the following statement for the inbound traffic coming on the outside:
static (inside,outside) {public IP} {private IP}
There should be one that says the same but with inside,inside:
static (inside,inside) {public IP} {private IP}
Please configure that rule and let me know the results.
Thanks.
--Armando Rojas

How to allow access to my airport extreme network for more than one wirelss device at the same time

I received a Kobo Vox ereader for Christmas and have not been able to connect to my home wireless network. It works with unsecured networks and I tested it out at an Apple reseller with their airport extreme netwok and it connects fine.
It seems as if I cannot have more than one wireless device connected to my home netork at the same time.
So here is what I did to test this out:
- I powered off the Kobo vox
- I shut down my macbook
- I turned off the modem and unplugged the power cord and removed the cable connection from the modem.
- I also unplugged the airport extreme router.
- I waited for about 15 minutes and then set it all up again and turned on the power to the router and the modem
- I turned on the kobo vox (I left my laptop shut down)
- my kobo vox was able to connected to the internet.
- I powered up my laptop and it couldn't connect to the internet.
So, I went through the above steps again and powered up my laptop first and was able to connect to the internet. I then turned on my Kobo and was not able to connect.
It seems as if I can only have one device connected to my wireless network at one time and that device is the first one to be powered on and connected to the internet.
Am I missing some network or airport extreme settings...
thanks

Try the following on your Mac.....
Open Macintosh HD > Applications > Utilities > AirPort Utility
Click Manual Setup
Click the Internet icon
Click the Internet Connection tab
Change the setting for Connection Sharing to read Share a public IP address
Click Update

How to allow access to web service running under ApplicationPoolIdentity

Hi All,
I have a WCF web service hosted in IIS 7 (or maybe 7.5, whichever comes with Windows server 2008 R2) using DefaultAppPool running under ApplicationPoolIdentity per Microsoft's recommendation. The web service needs to call a stored procedure to insert data
to a db. The web server is on a different VM than the database server. The db server is running SQL 2008 R2. Both VMs run Windows server 2008 R2.
When the web service tries to connect to db, it encounters this exception:
Exception in InsertToDb()System.Data.SqlClient.SqlException (0x80131904): Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'.
at System.Data.SqlClient.SqlInternalConnection.OnError(SqlException exception, Boolean breakConnection)
Here's the connection string in web.config:
Application Name=somewebservice;Server=somewebserver;Integrated Security=SSPI;Database=somedatabase;Connection Timeout=60"
How should I configure SQL security to make this work?
Thanks in advanced.

Thanks for the link Dan. Maybe I'm the one who cause the confusion :)
If I understand you(and Erland) correctly, you suggest using a custom, domain account for application pool identity. However, if we do that, our IT will need to maintain those accounts, and they don't want that. So I'm choosing a built-in account called
ApplicationPoolIdentity as the application pool identity, but it's not working. Network Service, on the other hand, works, but my boss wants us to follow MS's best practice.
What's puzzling is that according to this: http://learn.iis.net/page.aspx/624/application-pool-identities/, both Network Service and ApplicationPoolIdentity uses machine account to access network resource (like db in this case), but in my case, Network Service
works, but not ApplicationPoolIdentity.
Hallo Stephen,
with respect - it seems to me that only idiots are working at your IT ;)... It is absolutely useful to work with "service accounts" created within the domain. That's the only way to manage and control accounts!
If you want to "pass through" the identity of the web user (SSO) you have to check whether the app pool is set to "allow impersonate". As far as I understand the ApplicationPoolIdentity-function the app pool will create a unique user named as the service.
I assume that will not work with the connection to the sql server because this user is unknown.
Local Service will not work because it's restriction is located to the local machine.
Network Service will work because access to network resources will be available.
So my recommendation is to use a dedicated service account or impersonation:
http://msdn.microsoft.com/en-us/library/xh507fc5.aspx
Uwe Ricken
MCITP Database Administrator 2005
MCITP Database Administrator 2008
MCITS Microsoft SQL Server 2008, Database Development
db Berater GmbH
http://www-db-berater.de

How to allow access to web/application servers on ports other than 80

I have an iBook G4, running OSX 10.4.11, in a wireless network at home....
I'm developing an app that runs on JBoss (port 8080) and I want to expose it to the other computers on the network so I can see how it works with IE (i'm using Safari and Firefox during development). Seems that I should just be able to access the apps using http://ip.address:8080/application but that doesn't work... If I turn on personal web sharing, the other computers in the network can hit Apache running on my iBook (port 80, of course) so my box is visible to the other computers.
Is there a way to expose port 8080 to the other computers (outside of a redirect or reverse proxy on the Apache instance)?

Hi MacmanG2008, and a warm welcome to the forums!
You're actually posting in the Tiger forum and Leopard is so different, but anyway, Leo has 2 places that affect this.
Sharing Pref Pane, Firewall, you can open specific ports, (iirc), then in Security Pref Pane, you can allow certain or ALL services for a rest.

How do I access an external hard drive that is plugged into an AirPort Extreme

I have an external hard drive connected to my AirPort Extreme and I wanted to know how to access the photos and videos on it while using an iPhone or iPad while connected to the network. When I go to the airport utility app on my phone or iPad I can see the drive listed under file sharing and disks so I know it's connected. Any help would be greatly appreciated. Thanks

You will need an App like Filebrowser to do what you want. More details here:
Stratospherix - FileBrowser - Overview

How do I access server with VPN?

I have a connection via VPN to my work from home now. I'm on a MBP 10.6 and work is Cisco IPSec. It show the connection in my menu bar.
My question is how do I now see my work files? I figured the vpn connection would show in my sidebar or on my desktop. This is the first time I have tried connecting to work from home.

VPN normally just gets you into the network. You then have to mount the server's shared volume to see files. Depending on how the network is set up, you may be able to browse for the server by clicking on "All" under the Shared header in the Finder Sidebar (you may have to click the disclosure triangle to see things under the "Shared" header). It will be easiest if you then select to show the window in Column view. If you see the server to which you want to connect, click on it and you should be asked for a user name and password; if not, click the "Connect As" button that should appear in the next column.
If you can't browse for the server, use the Connect To Server command under the Go menu in Finder and enter in the appropriate URL to the server; check with your server administrator for the correct information.
Hope this helps.

How can I access photos on a network disk with apple TV ?

I just bought a WD network disk to put all my photos. I wish to look at them with apple TV but can't find how. The only thing I see is what shared in my laptop Itune. Can't I just acces the content on network device without going through Itune?
It should be easy as looking what's on the network and brows through the content!

fouiiin wrote:
I just bought a WD network disk to put all my photos. I wish to look at them with apple TV but can't find how. The only thing I see is what shared in my laptop Itune. Can't I just acces the content on network device without going through Itune?
It should be easy as looking what's on the network and brows through the content!
AppleTV2 does not support directly accessing media on network drives.
All media viewed must be via itunes.
If you can point iTunes to a folder on the network drive (Advanced>Choose Photos to Share) you maybe able to access them but only when itunes is running.
AC

How do I access files on my network I have Windows and netgear stora

I have a home network with Windows XP and Window 7 computers; and a Netgear Stora network hard drive. I want to be able to access files (photos, mostly) that are on the network from my iPad 2.
How can I do this?

First you have to share a folder or volume on the PC. How to do this depends on what operating system you have on the PC.
Once you have that set up, open a Finder window and look in the Sidebar under Shared. You may see the PC there. If not, go to the Go menu and select Connect to Server, and enter smb:// followed by your PC's IP address. You should be able to connect to the files that way. See this Apple article for further information.
Best of luck.

How to allow access to external VPN network via PPTP

Similar Messages

Maybe you are looking for