Using IPSec to connect to a virtual folder on another PC o..

I have a Windows 2000 Server running IIS 5.0 out in the DMZ of my Cisco
firewall using IP 10.1.1.X.

One of the websites on this server connects to a virtual directory which is
located on a Windows 2000 Professional PC on the corporate secured LAN at
10.0.0.X.

My ISP (they are configuring my firewall) informs me that I should look at
connecting to this shared folder (virtual directory) using IPSec on both
boxes to secure the connection instead of opening up Netbios on the firewall
to connect to the share on the Windows 2000 Pro box.

How do I do this on each of the boxes (Windows 2000 Server and Windows 2000
Pro)?

Thanks,

Rob Skinner

Your problem description seems a bit fuzzy, as you use "shared folder" and
"virtual directory" interchangeably and tossed in IPSec and NetBIOS as
well -- it is not clear to me whether you have a virtual directory on the
Server which is accessing data off a UNC share on the Pro machine, or
whether your Server and Pro machines have IIS installed and the Server is
sending a 302 redirection to the Pro machine.

I'm guessing the former, but FYI, what I described are two different things.

In the former scenario, the IPSec you are talking about has nothing to do
with IIS as it is a generic means of constricting network traffic by IP
address. It can work on IIS, but it also works for SQL, UNC, etc. I
recommend you first read documentation as a first step since you don't even
know how to do it -- ask a newsgroup after you've read documentation, tried,
and failed due to some error. Google for:
IP Security site:microsoft.com

In the latter scenario, IIS has its own "IP Security" checks (trivial IP
inclusion/exclusion to IIS web sites) -- but you cannot set up IP Security
on W2K Pro.


So, depending on what you are asking for, it is either "read documentation"
or "it's not possible".

--
//David
IIS
This posting is provided "AS IS" with no warranties, and confers no rights.
//
"Rob Skinner" <rskinner.TakeThisOut@provair.com> wrote in message
news:JyXDc.6$N11.2315@localhost...
I have a Windows 2000 Server running IIS 5.0 out in the DMZ of my Cisco
firewall using IP 10.1.1.X.

One of the websites on this server connects to a virtual directory which is
located on a Windows 2000 Professional PC on the corporate secured LAN at
10.0.0.X.

My ISP (they are configuring my firewall) informs me that I should look at
connecting to this shared folder (virtual directory) using IPSec on both
boxes to secure the connection instead of opening up Netbios on the firewall
to connect to the share on the Windows 2000 Pro box.

How do I do this on each of the boxes (Windows 2000 Server and Windows 2000
Pro)?

Thanks,

Rob Skinner