Some general VPN questions...

[markjrees]

Ok we're keen to set-up a VPN so that staff can access our network from outside the office. We've currently got PC Anywhere running on a server in the office which does allow incoming remote connections however it is very slow - even over a 500k home broadband connection. In the office we have a 2mb adsl connection.

What we want (if it's at all possible) is a VPN system which will allow us to connect remotely, run programs which are installed on our network (database, accounts, word etc) and for it to be sufficiently quick enough to be a viable working alternative.

We've had a basic win2k vpn server in the past although again it was very slow and only allowed file/folder browsing.

any input greatly appreciated.

btw we are mcse's so feel free to get as technical as necessary.

http://www.accountantjokes.co.uk

http://www.markjrees.co.uk

http://www.mjrcomputersolutions.co.uk

http://www.mjrfm.co.uk

 

[dearingkr]

Any VPN solution will do what you want with the possible exception of the database application. Due to the high traffic a database generates, you may not get the performance you like. for that, you may want to seriously consider a Terminal Server solution in conjunction with your VPN.

What has me confused is your statement

We've had a basic win2k vpn server in the past although again it was very slow and only allowed file/folder browsing.

A properly configured win2k VPN server will allow remote users to do anything they can do at their desk.

MCSE CCNA CCDA

 

[markjrees]

how do you enable the remote users to access regular programs like word and excel?? if it's possible we've got a number of users who'd be keen to connect to the office - at the same time also.

http://www.accountantjokes.co.uk

http://www.markjrees.co.uk

http://www.mjrcomputersolutions.co.uk

http://www.mjrfm.co.uk

 

[dearingkr]

If the VPN is set up correctly...

your remote user has a corp local IP address
Windows DNS has registered the computer

there is functionally no difference from being there.

If you don't have these capabilities, you may need to re-think your VPN setup.

MCSE CCNA CCDA

 

[antioed]

how do you enable the remote users to access regular programs like word and excel?? if it's possible we've got a number of users who'd be keen to connect to the office - at the same time also.

RDP!

Unless I misunderstand it sounds like you're looking for Terminal Services. Terminal Services would be your best bet for dealing with connection slowness or getting around the "cloud" effectively. The only concern I'd have would be the licensing, which, if you're talking about the Office suite you might want to check with MS because you might already have proper licensing to do what you're talking about. Think about it for a second; a user's cable connection might be fast on the download but usually they're highly limited on the upstream and then you throw encryption on top of that with your VPN connection - it's probably not your WAN connection that's the problem here, it's likely the problem is the user's connection - either way TS will give you better response since it's designed specifically to work around these kinds of issues. You could do like the other gentleman said and setup a terminal server with the appropriate licenses for the applications/sessions you'd be using and have your users access the server over RDP. I've seen this implemented different ways like for instance you could put up a website with links that launch an RDP session for the applications you want to host on the server...MS Word for instance. When the user clicks the link for Word an ActiveX control gets downloaded to IE to handle the RDP session, the user gets a login box and upon logging in Word will launch - nothing else; no desktop - which you might need for security. If security's not such a big deal with the users another idea would be to install the Office suite on the TS and let them log into a full desktop session and use whatever apps they wish. Just make sure you're in line with Microsoft's/vendor's licensing and of course tailor your security config for the server accordingly.