Hello everybody,

can somebody can explain how to etablish a connection from WM6 ( not 6.1 ) to a Microsoft Server 2003?

I can access our company with every Laptop with VPN, but WM6 no way.

The VPN-client on WM6 is seeming to do nothing!

with best regards

Alexander Schwarz

KLW GmbH

 To setup a VPN connection:

Tap Start > Settings > Connections tab > Connections.
Under My Work Network, tap Add a new VPN server connection and follow the instructions in the New Connection wizard.


Once the connection is setup, make sure that the Internet connection which you wish to use is set to "Connects to: Work".

My understanding is that this will then access your VPN connection.

Allready done, when i tab on the VPN-Connection, and click connect, the GPRS-Connection is build up!

but thats all!

I can see on our ISA2006, that no connection is etablished!

The Problem is not the ISA, bcouse of every XP-Client can connect!

best regards

Alexander Schwarz

KLW GmbH

 

Hi, KLW -

I know very little about complex VPN setups, but I was able to learn that there may be some specific issues related to Windows Mobile and VPNs. Have you visited the Forefront Edge Security Troubleshooting and Support site? There is a great deal of information about ISA 2006, and there are also a number of forums and blogs that deal specifically with ISA issues.

Good luck!

Since you have ISA 2006 setup , I guess you’re an enterprise customer, therefore I would have to recommend System Centre Mobile Device Manager. You will have to upgrade your device to 6.1 to get it to work, but I would recommend 6.1 anyway, It's a big improvement over 6. The problem with traditional VPN technologies is they don't reconnect very well. Once you get in an elevator or loose coverage,  you need to re-authenticate, this is a pain. Traditional VPN technologies are not efficient for mobile devices and would blow out your Data Plan. Also, scmdm supports IKEv2 and MobIKE for great security. So you get bullet proof VPN technology and you don’t have to keep entering you password.

Cheers Wayne

 And although what Wayne has posted sounds complicated. Once the server is up and running there is no configuration needed.  Out-of-the-box the devices will be able to use this vpn without users having to enter more than their email address and one-time-password.

 

Thanks David, You are are spot on, no complication fob keys... and once your devices are enrolled, you can provision the Exchange setting and deploy Line of Business application. It’s too easy.

Is it useful to use System Center Mobile Device Manager with only one client?

The scound problem: we are an enterprise comsumer, but our customers not!

 with best regards

Alexander Schwarz

KLW GmbH

If you had only one customer then it would be cost prohibitive. Do you have a dedicted WAN links to your customer ?

 

Kind Regards - Wayne

our customers have their servers, their own wm6 devices and their own WANs.

we only want to use active sync for sync their calendars, contacts and emails. we decided to try the connection with vpn, but the connection doesn´t work.

Best regards

Alexander Schwarz

KLW GmbH

If you really need VPN, then I suggest using scmdm. The other VPN technologies, including ISA 2006, weren't built for mobile devices. So if you do get it working you’ll find that your battery life is degraded, and you data costs will increase. Do you plan to have the VPN constantly connected, or just turn it on for specific tasks?

primary only on specific tasks

What is the difference betwen the VPN of scmdm and "the other" VPN?

 

BEST REGARDS

 

Alexander Schwarz

KLW GmbH

 I think what Wayne was refering to was the fact that traditionally VPNs have been developed with quality, speed and security in mind. 

 Battery life of a phone was never really a concern.

 

So while it is possible to setup a normal VPN for this.  It would be prudent to use a solution tailored to suit mobile devices,  mainly so you could conserver battery life. 

But also the administrative effort needed for a SCMDM fleet is much less than manually configuring the fleet.  The devices have the functonality built in and you can have a device setup with your companies policies and VPN connection in a matter of minutes out of the box. 

 

KLW AS:

our customers have their servers, their own wm6 devices and their own WANs.

we only want to use active sync for sync their calendars, contacts and emails. we decided to try the connection with vpn, but the connection doesn´t work.

Best regards

Alexander Schwarz

KLW GmbH

 

 

It sounds like the best method for you,  considering the distributed nature of your customers,  would be front end Exchange-Server-Activesync / OWA through ISA server in each customer site.   

 

Unless the customers sites are all connected in some way?

What is your main reasoning for needing the VPN?

i would have to agree with david, publishing owa and activesync through ISA is the best option. you mentioned iSA earlier, is it already confgiured to publish active sync? when you tried the vpn you mentioned that isa wasnt logging anything. do you have a firewall other than your isa, that could be blocking traffic? does the ISA have one nic, or two ? and finally is the isa's ip address public or is it behind a nat ? cheers wayne