David,
Thanks for the reply - I think I have already done this as per the script -
the filter in place looks like this:
12 #VPN: Authentication Filter for Mobile Clients
Accept notice ANY TCP log timeBased
from ANY_IP
to ANY_IP 76 timeGroup SALES-HOURS
The sales-hours time base is 07:00 - 20:00 every day. I have tried with this
tim-base on and off without success.
In the guide, it has the section labelled 'Enable Authentication Filter'
after the 'IP Pass Through Filter' section and at first I though perhaps it
was needed in both the RAF and IPPT - but reading further, that is not the
case.
Best Regards,
Steve Leach
Network Manager
MI International Limited
e-mail: [EMAIL PROTECTED]
URL: http://www.askalix.com
----- Original Message -----
From: "david raistrick" <[EMAIL PROTECTED]>
To: "Steve Leach" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Wednesday, September 18, 2002 2:57 PM
Subject: Re: [gb-users] VPN's & Using GBAuth
>
> > But for our sales force I wanted to add that extra level, which seemed
to be
> > offered by the GBAuth process. So I downloaded GBAuth (V3.2.3 seems to
be
> > the latest) program and install it on my (Windows XP) Laptop, and I use
the
> > GBAdmin interface to check the 'Require Mobile Authentication' in the
VPN
> > Objects section. All set I think.
>
> You dont mention having setup the apropriate Remote Access Filter.
>
> Take a look at the VPN Client guide on the support center. It says:
>
> "Remote Access Filter
>
> A default Remote Access Filter for VPNs is set in the GNAT Box system
> software. Once MOBILE AUTHENTICATION REQUIRED is checked, this Remote
> Access Filter can be enabled automatically by defaulting the Remote Access
> filters."
>
> Give that a try.
>
>
> ---
> David Raistrick
> Systems Administrator - Global Technology Associates, Inc
> [EMAIL PROTECTED]
>
>
>
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
To subscribe to the digest version first unsubscribe, then
e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
Archive of the last 1000 messages:
http://www.mail-archive.com/[email protected]
