topic Re: PA and SSTP in General Topics

PA and SSTP

vertical — Thu, 06 Mar 2014 08:26:48 GMT

Hi,

does anyone know about issues on using a MS SSTP VPN behind a PA. Especially when natting from a non-standard port (f.ex. 5002) to 443 port of the server.

The Logs look good, but shows 'incomplete' in the 'application' columns.

Kind regards.

Re: PA and SSTP

_slv_ — Thu, 06 Mar 2014 09:11:17 GMT

Hi Vertical

I'm not using MS SSTP but You can user app override to verify that it's working with it.

Take a look on How to Create an Application Override Policy

Regards

Slawek

Re: PA and SSTP

vertical — Thu, 06 Mar 2014 12:14:47 GMT

Hi,

thanks for your fast reply. It took me a step forward. I've set the app override rule for the port 4916 now:

The app settings look look like this:

The traffic log shows this now:

Looks good for me but the traffic still doesnt reach the server on this port?

btw: traffic on pptp port works fine and i can establish a connection on the same server.

Re: PA and SSTP

_slv_ — Thu, 06 Mar 2014 13:29:01 GMT

Please share Your NAT redirection policy and security policy that allowing this traffic.

Regards

Slawek

Re: PA and SSTP

vertical — Thu, 06 Mar 2014 13:32:51 GMT

Hi, sorry it was my fault. I had PBW rule on the wrong nic

But in the end your hint with the app-override solved the problem. Thank you veeeeery much

Re: PA and SSTP

_slv_ — Thu, 06 Mar 2014 16:24:31 GMT

I'm glad that You solve this problem.

regards

SLawek