So, can anyone explain me what is the difference between RRAS Static Filters, Windows Server Firewall and NPS regarding the filtering traffic for RA VPN clients and traffic designated for VPN server public/internet interface?
So when I want to filter traffic from RA VPN clients, for example so they can access only one server in intranet network, or they can/can not access the Internet over VPN server public/internet interface, where should I do it, in RRAS Static Filter, Windows Server Firewall or NPS?
Also, when VPN server is first device toward the Internet and it's public interface carry public ip address, where can I filter that only VPN ports be available? On RRAS Static Filters or Windows Firewall? (If I don't use NAT)
So what is the best practise?
