Remote to 2k via ISA

[Tom Del Rosso]

I know the ISA VPN is not needed for remote desktop, but I have some 2k
workstations on an SBS 2003 LAN, and I have VNC installed on them. Do you
need a VPN to access several VNC servers, or can ISA support it another way?

 

[ZVR]

With ISA 2000 you can use server publishing to access the internal VNC
servers, but you will have to configure each of them on a different port and
define the corresponding "server (incoming) protocols in ISA, on those
ports, to be used in the server publishing rules. You need to define as many
different "server" protocols/ports as how many VNC servers you want to
publish. This is needed because ISA does not have a port redirection feature
like ISA2004does.

Virgil

 

[Steve Foster [SBS MVP]]

I know the ISA VPN is not needed for remote desktop, but I have some 2k
workstations on an SBS 2003 LAN, and I have VNC installed on them. Do you
need a VPN to access several VNC servers, or can ISA support it another
way?

You can't publish multiple internal machines using the same port (which is
what VNC would require to avoid user port specification). If you made each
machine use a different port, you could publish them all.

But most of the standard VNC applications don't have robust security, and
are not suitable for direct exposure to the internet (which is what
publishing them via ISA would mean).

By using VPN, both the non-standard port requirements and the security
risks are removed.