VPN and access control

Hello,

how can i make an access rule to control the user computer name on VPN
server ? (to block or allow access)
how can i make the same control to my TSE server access ?
In fact , i want control the computer name (or MAC Address) for each login
to validate the user computer and avoide using external computer (home
computer for example).

Best regards,
David.

Replace your existing VPN/Firewall product with ISA Server. It does all
that (except by MAC address). It can be very detailed in the Access Rules.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

The views expressed are my own (as annoying as they are), and not those of
my employer or anyone else associated with me.
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------




"David" <(E-Mail Removed)> wrote in message
news:A38F2911-F50A-4E4F-A789-(E-Mail Removed)...
> Hello,
>
> how can i make an access rule to control the user computer name on VPN
> server ? (to block or allow access)
> how can i make the same control to my TSE server access ?
> In fact , i want control the computer name (or MAC Address) for each login
> to validate the user computer and avoide using external computer (home
> computer for example).
>
> Best regards,
> David.
>

Thanks for the response, but on this install we already have an hardware
firewall and we looking for a solution to do it without an ISA ??? In fact,
the reel problem is with the TSE licence and when a VPN acces is come in, we
need to make a filter to reject invalide station and block this connection to
avoid a false TSE licence count (like an user who copy vpn+TSE param on his
home computer and try to make a connection on it... then, if we can't filter
the home computer may used a TSE licence !)

thanks,
David


"Phillip Windell" wrote:

> Replace your existing VPN/Firewall product with ISA Server. It does all
> that (except by MAC address). It can be very detailed in the Access Rules.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
> The views expressed are my own (as annoying as they are), and not those of
> my employer or anyone else associated with me.
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
> http://download.microsoft.com/downlo...7/ts_rules.doc
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
>
>
> "David" <(E-Mail Removed)> wrote in message
> news:A38F2911-F50A-4E4F-A789-(E-Mail Removed)...
> > Hello,
> >
> > how can i make an access rule to control the user computer name on VPN
> > server ? (to block or allow access)
> > how can i make the same control to my TSE server access ?
> > In fact , i want control the computer name (or MAC Address) for each login
> > to validate the user computer and avoide using external computer (home
> > computer for example).
> >
> > Best regards,
> > David.
> >
>
>
>

I don't think this is possible with what you have to work with.
You don't have to worry about any TSE stuff with ISA. There is no ongoing
$$$ with ISA beyond the original purchase.


--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

The views expressed are my own (as annoying as they are), and not those of
my employer or anyone else associated with me.
-----------------------------------------------------


"David" <(E-Mail Removed)> wrote in message
news:996BD5A4-0C36-4811-9C20-(E-Mail Removed)...
> Thanks for the response, but on this install we already have an hardware
> firewall and we looking for a solution to do it without an ISA ??? In
> fact,
> the reel problem is with the TSE licence and when a VPN acces is come in,
> we
> need to make a filter to reject invalide station and block this connection
> to
> avoid a false TSE licence count (like an user who copy vpn+TSE param on
> his
> home computer and try to make a connection on it... then, if we can't
> filter
> the home computer may used a TSE licence !)
>
> thanks,
> David
>
>
> "Phillip Windell" wrote:
>
>> Replace your existing VPN/Firewall product with ISA Server. It does all
>> that (except by MAC address). It can be very detailed in the Access
>> Rules.
>>
>> --
>> Phillip Windell [MCP, MVP, CCNA]
>> www.wandtv.com
>>
>> The views expressed are my own (as annoying as they are), and not those
>> of
>> my employer or anyone else associated with me.
>> -----------------------------------------------------
>> Understanding the ISA 2004 Access Rule Processing
>> http://www.isaserver.org/articles/IS...cessRules.html
>>
>> Troubleshooting Client Authentication on Access Rules in ISA Server 2004
>> http://download.microsoft.com/downlo...7/ts_rules.doc
>>
>> Microsoft Internet Security & Acceleration Server: Guidance
>> http://www.microsoft.com/isaserver/t...dance/2004.asp
>> http://www.microsoft.com/isaserver/t...dance/2000.asp
>>
>> Microsoft Internet Security & Acceleration Server: Partners
>> http://www.microsoft.com/isaserver/partners/default.asp
>>
>> Deployment Guidelines for ISA Server 2004 Enterprise Edition
>> http://www.microsoft.com/technet/pro...isaserver.mspx
>> -----------------------------------------------------
>>
>>
>>
>>
>> "David" <(E-Mail Removed)> wrote in message
>> news:A38F2911-F50A-4E4F-A789-(E-Mail Removed)...
>> > Hello,
>> >
>> > how can i make an access rule to control the user computer name on VPN
>> > server ? (to block or allow access)
>> > how can i make the same control to my TSE server access ?
>> > In fact , i want control the computer name (or MAC Address) for each
>> > login
>> > to validate the user computer and avoide using external computer (home
>> > computer for example).
>> >
>> > Best regards,
>> > David.
>> >
>>
>>
>>