How to Create a VPN Network With Trend Micro Firewall

Connect to a remote office with a Virtual Private Network.

A Virtual Private Network (VPN) allows you to securely access a remote network, such as the network in your office, over the Internet. To create a VPN with Trend Micro Firewall using the point-to-point tunneling protocol (PPTP), you need to first create the VPN connection, then create a custom rule to allow port 1723 through the firewall for PPTP, then create a second custom rule to allow the Generic Routing Encapsulation (GRE) protocol, or protocol 47. A VPN using PPTP also uses GRE; GRE is blocked by default in Trend Micro Firewall.

Instructions

Create The VPN Connection

1. Click "Start," "Control Panel," "Network Connections" and then choose "Create a new connection." Click "Next" to continue with the wizard.

2. Click "Connect to the network at my workplace" and "Next." Click "Virtual Private Network connection" and "Next" once again.

3. Type a name for the connection, click "Next", click "Do not dial the initial connection" and click "Next" to continue.

4. Type the host name or IP address of the VPN, click "Next," select either "Anyone's use" or "My use only." Click "Next" one more time and finally click "Finish."

Add Firewall Rules

1. Double-click the Trend Micro icon in the system tray to open the main screen. Choose "Personal Firewall Controls" and select the "Personal Firewall" tab. Click "More Settings" and then "Advanced Settings."

2. Select the "Network Protocol Control" tab and click "Add" to add a new firewall rule. Enter a description, for example, "PPTP."

3. Choose "Outgoing" for the connection, pick "Allow" for the response, select "TCP" for the protocol and enter "1723" for the port number. Click "OK" to save this rule that now allows VPN traffic to pass through the firewall using the standard VPN port 1723.

4. Click "Add" once again to add another firewall rule. Enter a description, for example "GRE."

5. Choose "Outgoing" for the connection, pick "Allow" for the response, select "Custom" for the protocol and enter custom protocol number "47." Click "OK" to save this rule that now allows traffic using the "GRE" protocol to pass through the firewall.

6. Confirm that you can successfully connect to the remote location over the VPN.

References

• Microsoft Support: How to Configure a Vpn Connectio to Your Corporate Network in Windows XP Professional
• Microsoft Support: You Receive an "Error 721" Error Message When You Try to Establish a VPN Connection Through Your Windows Server-Based Remote Access Server