Hi all,

Im new to the forums.
I am working as sys admin for a company who has decided to move our CRM server along with other servers to a hosted environment. We are just doing CRM for now.

Now, we have 3 sites(local/international) connected via Mako's through VPN tunnels. Our site is the main office and behind the Mako sites an ISA2006 box(proxy). From there it is connected to others servers(DC/Dev/Mail/Backup AD/etc).

Now, at the datacentre there are 5 VESA machines all setup and ready for us.

the most important server would be the AD Replicator(replicates data from our AD) at the remote site. That would be crucial to our CRM server for authentication.

We have discovered that the BEST way to setup the link would be through an IPSec tunnel. I have opened up their firewalls' IP and their console IP address in our Mako as outbound rule to allow EVERYTHING(protocols/traffic).

The issue now is that I believe our ISA2006 box would cause issues.

What I need to know is CAN I SETUP AN IPSEC TUNNEL THROUGH ISA2006 WHICH IS SITTING BEHIND OUR MAKO? So in essence - the Mako box WOULDNT initiate the tunnel as its only allowing EVERYTHING to that address.

Has ANYONE setup an IPSEC tunnel or PPTP link through ISA?

This weekend, i was planning on taking our proxy down and connecting to their VM console directly.