I like to know, if anybody experiencing a missing standard gateway when using PPTP for VPN with Windows 7 clients and ISA 2006 or any other VPN gateway? Or if the DHCP configuration correctly arrived at Windows 7 clients and the clients uses its own local IP address as the standard gateway, what should be the default behavior and security requirements.Regards, Tom

The following article can be helpful. PPTP-based remote access VPN deployment Arthur Xie - MSFT

Gateway settings on VPN client connections are irrelevant really. The connection established is a point-to-point link. What goes in one end comes out the other, like a cable connection, not like a routed connection. The received IP address is defined as the default gateway and traffic directed there comes out at the VPN server at the other end of the point to point link. The default behavior changed with Windows 2000 and is still the same as far as I know. See KB254231. Bill

Thanks, but it is not the question to deploy VPN.Regards, Thomas

No, the gateway setting on VPN client is important. Check VPN client with and without gateway. Without gateway you can still access targets on the major connection which are not accessible through the VPN connection, and this is the security issue. When your VPN client has its own IP as the gateway, you will not be able to access any resource on the major connection but only through the VPN tunnel.This is by design.Regards, Tom

Now we found the reason for this issue just a few minutes ago. The DHCP Reply and Request rules on ISA have been removed for what ever reason in the past. Now they are in place again and all clients receive DHCP options again through DHCP Relay Agent on ISA again.Additionally whatch thishttp://support.microsoft.com/Default.aspx?kbid=973243Regards, Tom