Anywhere access behind restrictive firewall

Con risposta Anywhere access behind restrictive firewall

  • Tuesday, February 05, 2013 7:56 AM
     
     

    Hi,

    I am not sure if this question makese sense, so feel free to point me in the right direction...

    I would like to set up anywhere access on our new server. But we are behind a restricive (university) firewall and our IPs are not accessible from outside the network. Therefore, remote desktop connections could so far not be established.

    However, we never had any issues using teamviewer. That's why I was hopeing that the new anywhere access is using the priciples of teamviewer and would therefore work?

    Do I need to have the IPs accessible from outside the network to use anywhere access?

    Thanks

    Arnie

All Replies

  • Monday, February 11, 2013 8:39 AM
    Moderator
     
     

    Hi Arnie,


    Firstly, would you please let us know the edition of the your operating system.


    Meanwhile, in general, you need own at least one static public IP address to implement anywhere access.


    More information:

    Anywhere Access Homepage

    Manage Anywhere Access in Windows Server 2012 Essentials


    Hope this helps.


    Jeremy Wu
    TechNet Community Support

  • Monday, February 11, 2013 2:17 PM
     
     
    If you look at the documentation you will find which ports you will need to open in order to get anywhere access working. If you dont have static IP's you could try a dynamic IP server which will allow you to put a domain name which will translate to your current IP. They normally run a little bit of software on a server or some config on routers. If you did go down that route remember if your IP changes then you may well be offline for 5mins while it replicates.

    8B17

  • Tuesday, February 12, 2013 10:05 AM
     
     

    Hi, I am using Windows Server 2012 Essentials. I have a static IP, but I cannot ping the IP from outside the network (e.g. from home).

    So I guess, when I cannot ping the static IP, I cannot use anywhere access, right?

  • Tuesday, February 12, 2013 11:56 AM
     
     Answered

    Hi arne,

    Your not able to ping IP because your university might be blocking ICMP request or you might be trying to ping its private IP address. If your server is using private IP Address you should configure Virtual host in your firewall ie, DNAT(Destination NAT). if the server is using Public IP Address make sure you open port 3389 (RDP) in the firewall for your server.

    Your are able to use Teamviewer because port 443 might be open in your environment.

  • Tuesday, February 12, 2013 3:14 PM
     
     Answered

    Teamviewer like logmein will both work because they connect outwards and do not connect inwards this way most firewalls will allow this traffic.

    Could you give more infomation on your setup are you behide a firewall or router which you have access to and are able to configure? Just because you cant ping does not mean you cant open the ports required for anywhere access.


    8B17


  • Thursday, February 14, 2013 7:16 AM
    Moderator
     
     Answered

    Hi Arnie,


    I agree with the above suggestions.


    Also, regarding the Anywhere Access functionalities—Remote Web Access, virtual private network, and DirectAccess—in Windows Server 2012 Essentials, please refer to the following documents:


    Manage Anywhere Access in Windows Server 2012 Essentials

    Manage Remote Web Access in Windows Server 2012 Essentials

    Use Remote Web Access in Windows Server 2012 Essentials

    Windows Server 2012 Essentials: Router Setup


    In addition, it is recommended to address Windows Server 2012 Essentials related questions in our Windows Server 2012 Essentials General forum for better assistance.


    Hope this helps.


    Jeremy Wu
    TechNet Community Support