VPN and Exchange

dbeato

@jaredbusch said in VPN and Exchange:

@bbigford you are totally overthinking this.

They obviously have on site Exhange. That will require some kind of DNS entry for OWA and OA to work.

They chose to use exchange.domain.com, this is perfectly normal.

They only have a single IP, or only have their router configured to use a single IP. This is also very common.

Then someone wants to use a VPN. They enable it in the firewall, or whatever device, and just use the existing FQDN that resolves to the site IP.

This is also perfectly normal and 100% ok.

Could they have added a CNAME, such as vpn.domain.com? Sure, but there is no technical reason to do so.

I don't think they have web services, but if they were to, those wouldn't be able to use 443 I'm guessing since that port is already forwarded. I am definitely overthinking that one.

L2TP VPN does not need port 443.