3005 VPN Concentrator Port 443, SSL, TCP

[rubbaninja]

Wanting to upgrade my concentrator to use the new HTTPS (HTTP over SSL). Currently we have a majority of our clients using IPSEC over TCP port 443 or 10000. Mostly 443 due to some quirky connection methods and areas.

I see in chap 15 that changing the HTTPS port from 443 to something else is possible... Has anyone run across any issues? Do you think that upgrading 3.6.7 to 4.1 will mess up the current tunneling proto configuration?

No test concentrator and very demanding users leave little room for error.

Thanks,

 

[themut]

The upgrade shouldn't mess your current configuration I have done it a couple of times last week and I didn't encounter any problems. If you enable NAT-T (Nat Traversal) on the concentrator then you can forget about IPSec over TCP since the clients will negotiate NAT-T during tunnel establishment and use IPSec over UDP 4500, then you would'n need to modify https on a different port...