Connecting remote sites 2

[andyds]

Server = Windows 2003 – Clients = XP

This may not be the correct forum for this query but I have a Windows 2003 server acting as a domain controller to the PC’s in our main office. I have four remote office’s that now need to be connected (securely) into the main office so they will managed centrally by the domain controller.

I need some advice on the best way to go about this. The remote sites only have about 20 users each and all have internet access. I have to work with a modest budget and this needs to be taken into consideration. What options have I got?

Any help appreciated.

 

[kmkeshav]

I would suggest a site to site VPN (probably using a Cisco PIX firewall). You can get low end firewalls in the market. This is the secured way of interconnecting branch offices.

-Keshav

 

[andyds]

Would I have to purchase one for each site? How would it work?

 

[kmkeshav]

You would have to purchase one for each site. Check for different Cisco PIX firewall security appliances before you decide on a specific model. I believe Cisco PIX 501 should meet your requirements. More details can be found at:

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_data_sheet09186a0080091b18.html

How it works:

Install the PIX devices one in each site. Configure site to site VPN between them. Each site would become a subnet. For example:

Site A (Head Office) - 192.168.10.0
Site B (Branch Office) - 192.168.11.0
Site C (Branch Office) - 192.168.12.0

Regarding the Active Directory design part, I would recommend a domain controller placement in a site with more than 10-15 users. Each office would become a "Site" in Active Directory. After you have configured "Sites" in Active Directory, you could configure replication between the sites.

Hope this helps. Post back if you have more questions.

-Keshav

 

[kmcferrin]

Only thing that I would change about this recommendation is to go with Cisco ASA instead of PIX. You get a lot more functionality for roughly the same price. The ASA that is comparable to the PIX 501 is the ASA 5505.

There are other SOHO firewall options that might be a tad less expensive than the ASA or PIX, but for a cost savings of $40-$50 per unit you're losing a lot of functionality.