Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-17 Thread Andrew S. Baker
gt; relevant, although they push RRAS. > > For example, WIP doesn't work properly with DA. Only with AVPN. > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsadmin@lists. > myitforum.com] On Behalf Of Kurt Buff > > Sent: Monday, November

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-16 Thread Michael B. Smith
...@lists.myitforum.com] On Behalf Of Andrew S. Baker Sent: Thursday, November 16, 2017 3:37 PM To: ntsysadm Subject: Re: [NTSysADM] Looking for a global VPN solution - looking for input I'm glad I didn't spend too much time on DirectAccess... Regards, ASB On Mon, Nov 13, 2017 at 9:08 PM, Michael B

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-16 Thread Andrew S. Baker
e- > From: listsad...@lists.myitforum.com [mailto:listsadmin@lists. > myitforum.com] On Behalf Of Kurt Buff > Sent: Monday, November 13, 2017 8:19 PM > To: ntsysadm > Subject: Re: [NTSysADM] Looking for a global VPN solution - looking for > input > > Arg - that should be

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-15 Thread Don Ely
Correct On Wed, Nov 15, 2017 at 9:23 PM Kurt Buff wrote: > So, it's not used to configure load balancing or client redirection > for GP? OK, I can see that. > > Kurt > > On Tue, Nov 14, 2017 at 6:22 PM, Don Ely wrote: > > Panorama is only a MGMT tool for

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-15 Thread Kurt Buff
So, it's not used to configure load balancing or client redirection for GP? OK, I can see that. Kurt On Tue, Nov 14, 2017 at 6:22 PM, Don Ely wrote: > Panorama is only a MGMT tool for the firewalls. It has nothing to do with > traffic mgmt > > On Nov 14, 2017 17:25, "Kurt

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-15 Thread Kurt Buff
>>> >>> Instead you need to be using their Automatic VPN. The endpoint isn't very >>> relevant, although they push RRAS. >>> >>> For example, WIP doesn't work properly with DA. Only with AVPN. >>> >>> -Original Message-

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Don Ely
Panorama is only a MGMT tool for the firewalls. It has nothing to do with traffic mgmt On Nov 14, 2017 17:25, "Kurt Buff" wrote: > I presume this requires Panorama? We don't have that, I've been > wanting it for a while, but it's been hard to justify when we have > only 3

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Kurt Buff
; capability within 5 years. > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Tuesday, November 14, 2017 4:31 PM > To: ntsysadm > Subject: Re: [NTSysADM] Looking for a global VPN solution - looking for

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Don Ely
Sure it can, DNS RR or some kind of GTM As for cloud, PA does GP in the cloud. Scales up and down as needed... On Tue, Nov 14, 2017 at 1:35 PM Kurt Buff wrote: > Perhaps I missed it, but I didn't see that GP will autoconnect to the > closest/fastest site. > > That doesn't

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Kurt Buff
ush RRAS. > > For example, WIP doesn't work properly with DA. Only with AVPN. > > -Original Message- > From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] > On Behalf Of Kurt Buff > Sent: Monday, November 13, 2017 8:19 PM > To: ntsysadm >

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Kurt Buff
Perhaps I missed it, but I didn't see that GP will autoconnect to the closest/fastest site. That doesn't mean GP is out of the running - I like it where I've set it up, so it's on my list, especially since all of our sites have Palo Altos already. But, from the way the questions were put to me,

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Melvin Backus
To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input The 2.0.0.0 is the module version of VpnClient. On Windows 10, Add-VpnConnectionRoute doesn’t require admin privs. Add-VpnConnection also allows you to specify SplitTunneling when you create

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Michael B. Smith
n Behalf Of Melvin Backus Sent: Tuesday, November 14, 2017 11:45 AM To: ntsysadm@lists.myitforum.com<mailto:ntsysadm@lists.myitforum.com> Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input Multiple articles during my initial, but granted brief, research indi

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Melvin Backus
...@lists.myitforum.com] On Behalf Of Michael B. Smith Sent: Tuesday, November 14, 2017 1:16 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input That was true prior to 1703, unless you wrote your own packager. It isn't any longer. The AVPN

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Michael B. Smith
@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input Multiple articles during my initial, but granted brief, research indicated one of those were required. Not having any exposure to it I reverted to my trusted source, the list, to confirm or debunk

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Melvin Backus
)_/¯ -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Michael B. Smith Sent: Tuesday, November 14, 2017 10:47 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input AVPN

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Michael B. Smith
On Behalf Of Melvin Backus Sent: Tuesday, November 14, 2017 6:41 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input Can you elaborate on the 2016 functionality issues? -- There are 10 kinds of people in the world... those w

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Melvin Backus
Backus Sent: Tuesday, November 14, 2017 6:41 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input Can you elaborate on the 2016 functionality issues? -- There are 10 kinds of people in the world... those who understand binary

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Michael B. Smith
14, 2017 6:41 AM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input Can you elaborate on the 2016 functionality issues? -- There are 10 kinds of people in the world... those who understand binary and those who don

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-14 Thread Melvin Backus
. Smith Sent: Monday, November 13, 2017 9:08 PM To: ntsysadm@lists.myitforum.com Subject: RE: [NTSysADM] Looking for a global VPN solution - looking for input So just a data point to consider. Microsoft is kinda moving away from DirectAccess. Many of the security functionalities added

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-13 Thread Micheal Espinola Jr
+1 or Sonicwall Golbal VPN. Either way, I'd go hardware and away from Microsoft. -- Espi On Mon, Nov 13, 2017 at 6:04 PM, Don Ely wrote: > Why can't Global Protect achieve all of your needs? Did I miss some > requirement they can't meet? > > On Mon, Nov 13, 2017 at 5:25

RE: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-13 Thread Michael B. Smith
doesn't work properly with DA. Only with AVPN. -Original Message- From: listsad...@lists.myitforum.com [mailto:listsad...@lists.myitforum.com] On Behalf Of Kurt Buff Sent: Monday, November 13, 2017 8:19 PM To: ntsysadm Subject: Re: [NTSysADM] Looking for a global VPN solution - looking

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-13 Thread Don Ely
Why can't Global Protect achieve all of your needs? Did I miss some requirement they can't meet? On Mon, Nov 13, 2017 at 5:25 PM Kurt Buff wrote: > Arg - that should be "seeking commercial services".. > > And, once I bring recommendations, it might well be that we just

Re: [NTSysADM] Looking for a global VPN solution - looking for input

2017-11-13 Thread Kurt Buff
Arg - that should be "seeking commercial services".. And, once I bring recommendations, it might well be that we just fall back to a DirectAccess server in each office, with our without a multi-site configuration, potentially with an SSP VPN appliance also at each office for backup and