Sign in
 
HomeProductsLibraryLearnDownloadsSupportForums
Microsoft Forefront TechCenter >
> 
> 
Opening ports on a Sonicwall NSA 2400 firewall for Ms Direct Access server 2012

Pergunta Opening ports on a Sonicwall NSA 2400 firewall for Ms Direct Access server 2012

  • Wednesday, March 20, 2013 10:31 PM
     
     
    Sign In to Vote
    0

    Can someone help with the step by step configuration of a sonicwall NSA 2400 firewall to allow Ms Direct Access please. I have gone through the sonicwall forums and have failed to get any help.

     

All Replies

  • Tuesday, April 02, 2013 4:00 PM
     
     
    Sign In to Vote
    0

    Hi,

    what OS version do you run? If you put the DA server behind the NAT-firewall only the least efficient protocol (IP-HTTPS) can be used for DA. If you want use IPSEC or Teredo the DA server must have configured public IP addresses. Here the article listing the firewall ports. http://technet.microsoft.com/en-us/library/dd857262.aspx

    Direct Access link collection - http://technet.microsoft.com/en-us/network/dd420463.aspx

    Regards,

    Lutz

     
  • Tuesday, April 02, 2013 6:36 PM
     
     
    Sign In to Vote
    0

    Hi Lutz,

    Thanks for the response, the OS is Server 2012, thanks once again.

     
  • Wednesday, April 03, 2013 7:09 AM
     
     
    Sign In to Vote
    0
    That is great. And you should be good to go. Let us know how it goes. Thank you, Lutz
     
  • Wednesday, April 03, 2013 10:06 AM
     
     
    Sign In to Vote
    0

    The server configuration went well and the issue now is for the client to go through the sonicwall nsa 2400 firewall from outside.

    The client tries to connect and stays on connecting for ever.

    I am testing with a windows 8 client.

     
  • Wednesday, April 03, 2013 3:25 PM
     
     
    Sign In to Vote
    0
    From external, not from the Windows 8 client, can you verify what certificate is installed on the DA server?
    e.g. open a web browser and go to https://URLofYourDAServer or use openssl s_client -connect URLofYourDAServer:443
    Thank you,
    Lutz