Yes I remember reading that now too. Let me clarify, I didn't yank
wins out but migrated systems off of the wins usage slowly to see how it
affected performance, becuase I did not see any problems in my test lab. But
I will admit that I did not test the effects of wins over the WAN, mostly
due to budget constraints but the timeline was also a factor here. I guess I
can honestly say, it was a learning experience, I screwed up, and I will
never make the same mistake twice. Next time we will not make a change like
this until we can afford to test it first.
Have a good uneventful Dayy, cause those are the best kind,
TOny
-----Original Message-----
From: Byron Kennedy [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 29, 2001 5:38 PM
To: NT 2000 Discussions
Subject: RE: win2k vpn thoughts
Actually Tony, In MS(s) defense; i don't think they recommend simply yanking
WINS out (of the equation) and expecting stuff to just "work". I think they
state (as queried from my own memory) 1. that you can disable/remove WINS
when using a complete win2000 environment (with DDNS configured and
functioning properly) AND you don't support legacy applications that are
dependent upon NetBIOS name resolution over WAN links and 2. testing your
environment thoroughly in any case. this was my interpretation and
experience at least, though it's been a while since i looked at it. All the
same, agreed, Exchange 5.5 + WAN + WINS = GOOD. :).
To the original poster: Although I can appreciate Tony's experiences w/
pptp, from a security and integration perspective for growth, I'd make a
hard case not to use a turnkey IPSec solution before investing resources
into PPTP.
cheers.byron
-----Original Message-----
From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 29, 2001 3:46 PM
To: NT 2000 Discussions
Subject: RE: win2k vpn thoughts
No exchange 5.5 sp3
-----Original Message-----
From: Turner, Robert D. Jr [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 29, 2001 10:09 AM
To: NT 2000 Discussions
Subject: RE: win2k vpn thoughts
Which version of Exchange? I'll guess NOT Exchange 2K.
Bob
-----Original Message-----
From: Anthony L. Sollars [mailto:[EMAIL PROTECTED]]
Sent: Monday, October 29, 2001 12:57 PM
To: NT 2000 Discussions
Subject: RE: win2k vpn thoughts
We are using a Cisco VPN Concentrator and connect to it with the win2k vpn
client over PPTP. It has proven to be secure and pretty stable. One warning
though, don't believe microsoft when they say you can take wINS out of the
equation and replace it with DNS. We connect to exchange over VPN, and
without WINS it was a nightmare, we had to re-instate our WINS
infrastructure just for exchange use over VPN. But, in the end, VPN
peformace was greatly increased once wins was back online, when it came to
network browsing. Hope this helps.
-TOny
-----Original Message-----
From: Benjamin Scott [mailto:[EMAIL PROTECTED]]
Sent: Saturday, October 27, 2001 7:38 AM
To: NT 2000 Discussions
Subject: RE: win2k vpn thoughts
On Fri, 26 Oct 2001, WebMeister wrote:
> It is not compatible with other IPSec VPNs as far as I know.
The IPsec implementation in Windows 2000 does work with FreeS/WAN (the
Linux IPsec implementation), although not well. I think you need to use
pre-shared secrets -- no public keys -- and configuration is a pain. No way
to do a dynamic IP, either. Microsoft seems to view IPsec as a way to
transport L2TP, rather than a full-fledged secure transport in itself.
Microsoft still seems to favor PPTP as a VPN solution. I cannot say how
well it works, as the security concerns with PPTP have kept me away from it.
--
Ben Scott <[EMAIL PROTECTED]>
| The opinions expressed in this message are those of the author and do not
|
| necessarily represent the views or policy of any other person, entity or
|
| organization. All information is provided without warranty of any kind.
|
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
CONFIDENTIALITY NOTICE: This E-Mail is intended only for the use of the
individual or entity to which it is addressed and may contain information
that is privileged, confidential and exempt from disclosure under applicable
law.
If you have received this communication in error, please do not distribute
it. Please notify the sender by E-Mail at the address shown and delete the
original message. Thank you for your compliance.
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [EMAIL PROTECTED]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]
