Hardening Windows VPN Server

When you install a VPN on Windows Server you will quickly find every kind of attack heading your way. Most of this is levelled at PPTP which is a very old protocol and should be disabled in favour of L2TP. The simplest way to do this is turn off the firewall rule that is created for PPTP when you install routing and remote access. Look for the rule “Routing and Remote Access (PPTP-In)” Port 1723 and disable it.

I also recommend the excellent IP Ban PRO (like fail2ban on linux), the other programs I tried for windows for blocking attack IP’s simply didnt work.

I also recommend you rename the Administrator account to incoherent rubbish as its the username “Administrator” that 99% of the attacks target.