Microsoft KB Archive/283628

= How to Enable PPTP Clients to Connect Through an ISA Firewall =

Article ID: 283628

Article Last Modified on 1/15/2006

-

APPLIES TO


 * Microsoft Internet Security and Acceleration Server 2000 Standard Edition

-



This article was previously published under Q283628



SUMMARY
This article describes how to enable Point-to-Point Tunneling Protocol (PPTP) clients to connect through an Internet Security and Acceleration (ISA) firewall.



MORE INFORMATION
To allow internal clients to create PPTP connections to an endpoint on the public side of an ISA firewall, you have to explicitly configure the PPTP pass through in the ISA Management program.

To enable PPTP client connections through an ISA firewall, follow these steps:
 * 1) Start the ISA Management program, and then click Access Policy.
 * 2) Right-click IP Packet Filters, and then click Properties.
 * 3) On the General tab, click to select Enable IP Routing.
 * 4) On the PPTP tab, click to select the PPTP through ISA firewall box.

This enables PPTP through the ISA server, and creates a filter labeled, &quot;SecureNAT PPTP&quot;. By doing so, PPTP sessions can be created through the firewall.

Note: You will not be able to use a PPTP connection by using either the Winsock Proxy Client, or the ISA Firewall Client. Clients will require a Gateway address to provide a network route through the ISA server for PPTP connections to be made successfully.

