Network Administrator Knowledgebase

Nov 3 2007   6:56AM GMT

Windows Server 2008 & SSLVPN aka Secure Socket Tunneling Protocol (SSTP)

Michael Khanin Michael Khanin Profile: Michael Khanin

Secure Socket Tunneling Protocol (SSTP) is a new form of (SSL-based) VPN tunnel with features that allow traffic to pass through firewalls that block PPTP and L2TP/IPsec traffic.

SSTP provides a mechanism to encapsulate PPP traffic over the SSL channel of the HTTPS protocol.  The use of PPP allows support for strong authentication methods such as EAP-TLS.  The use of HTTPS means traffic will flow through TCP port 443.  Secure Sockets Layer (SSL) provides transport-level security with enhanced key negotiation, encryption, and integrity checking.

SSTP supports multiple authentication methods such as passwords, smart cards, certificate-based and “One Time Password” authentication.

SSTP has integrated NAP support for client health check, by using the NPS (Network Policy Server – ex-IAS) for authentication and authorization.

Client/Server Requirements

SSTP is available through the Windows Server 2008 Routing and Remote Access VPN Server.  IIS is not required for running SSTP, since RRAS listens to HTTPS connections directly over HTTP.SYS.

Only clients running Windows Vista SP1 are able to create SSTP-based VPN tunnels.

Additional reading:


 Comment on this Post

There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to:

Share this item with your network: