VPN requirements for exchange

[TNGPicard]

Well - I'm finally giving into some of our VP's and going to setup some split tunnel VPN's for them so they can check their e-mail and surf the web at teh same time (as well as access a _few_ other resources).

If their "normal" outlook profile can talk to Exchange 2007, do they need to be able to talk to a domain controller or global catalog as well or does it all happen at Exchange? The reason I ask is sometimes I get a message that Outlook is waiting for a response from one of my domain controllers (both of which happen to be global catalogs).

I realize its not an Exchange question per say, and I don't really want to get into a discussion of VPN philosophy (dogma?) just trying to establish what the base I can allow through would be.

TNGPicard

 

[58sniper]

Well Cap'n....

Have you considered Outlook Anywhere, which would allow them to connect to Exchange when remote, but not require the cost and complexity of a VPN? If you're looking at a VPN solely for Exchange access, Outlook Anywhere is certainly something to consider.

Pat Richard MVP

 

[xmsre]

If your clients are outlook 2003 or 2007, why bother; use Outlook anywhere, formerly RPC over HTTP.

 

[TNGPicard]

I do have them setup to use Outlook Anywhere but they VPN to access our Terminal Server as well for access to other systems. The problem they have with Outlook anywhere, which could be is I can't make it work seamlessly - I've setup a 2nd Outlook profile which has to sync up every time its launched and if they don't use it for days at a time, the mailbox delta can be quite large and take a long time to sync up (whereas in the office, I don't use cached exchange mode).

TNG

 

[Zelandakh]

Why are you using a second profile?

 

[TNGPicard]

Zelandakh -

The how to document I followed said thats how they recommended it and I was struggling to figure it out. Should/can they use "outlook anywhere" for day to day stuff?

TNG

 

[58sniper]

Yep. Outlook should determine whether it can connect via RPC locally, or whether it needs to use the HTTPS wrapper.

Pat Richard MVP

 

[xmsre]

The how to document I followed said thats how they recommended it and I was struggling to figure it out. Should/can they use "outlook anywhere" for day to day stuff?"


I do.

 

[58sniper]

Ditto

Pat Richard MVP