The VPN check for adaptive policies is tied to the VPN software you are using and will only work with the supported clients. There is a work around for this issue though that you can use. If you specify the IP range your concentrator gives out in your corporate address range you can have your agents switch to CorpNet when they establish a VPN connection. You would only have CorpNet and Default in this situation, but the majority of our customers have actually found their CorpNet and VPN policies wined up being almost identical anyway.
Just as a side note. The VPN address range is not used by Adaptive Policies, they are actually only used by the AV Compliance feature. If you have AV Compliance enabled and you are out of compliance it will keep your agents from establishing a VPN connection. The agents will also be blocked from communicating to IP's in your CorpNet address range. Thank you, Adrian Kaylor, CISSP Technical Product Manager Internet Security Systems Phone: (404) 236-3052 -----Original Message----- From: [EMAIL PROTECTED] On Behalf Of MATT PIERCE Sent: Friday, March 11, 2005 12:11 PM To: [EMAIL PROTECTED] Subject: [ISSForum] RSDP and Safenet Does anyone have any experience getting clients using the Safenet VPN client to do adaptive profile switching? I have entered the Client DHCP rangeinto the vpn field of Adaptive Policy Settings. I'm making these changes on the properties of the client group, Add / Edit group Settings. Clients using the Intel VPN Client do VPN profile switching beautifully, Safenet does not. I've also tried adding the gateway addresses without results. I'm working with Craig Treubig at ISS as well as techsupport. The official ISS line is that the Safenet client is not supported. I found a previous Issforum thread that addressed this issue. I'll include it below. Does anyone know of a method to make this work? http://lists.virus.org/issforum-0402/msg00004.html _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328. _______________________________________________ ISSForum mailing list [email protected] TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to https://atla-mm1.iss.net/mailman/listinfo/issforum To contact the ISSForum Moderator, send email to [EMAIL PROTECTED] The ISSForum mailing list is hosted and managed by Internet Security Systems, 6303 Barfield Road, Atlanta, Georgia, USA 30328.
