Hello:
It appears on Server 2008-R2 and Windows 7 that you cannot require IPSec
user authentication for inbound ICMPv4 echo requests (pings) without causing
those ping requests to be dropped.
In my testing, you can require IPSec for pings, you can also
require computer authentication from the pinging peer in the forest and
it'll still work fine, but once you add IPSec user authentication (with or
without computer auth too), then the incoming ping packets are dropped.
Yes, I've got IPSec user authentication correctly configured and working
with other protocols on the same test boxes (Kerberos for computer auth,
Kerberos for user auth), but it seems ping does not work with IPSec user
authentication. On my test systems, ICMP is not exempted. Testing was done
with the built-in ICMPv4-In incoming firewall rule in the "File and Printer
Sharing" group. No testing done with ICMPv6.
Has this been the experience of others too?
Thx
|