SSL VPN behind PIX 515

stephanporancea · ‎10-19-2007

Hello,

I hope somebody can help with this

I have a SonicWall SSL-VPN 2000 behind a PIX 515 which I cannot access from outside.

The configuration is like this:

name x.x.x.x SSLVPN_Ext

name y.y.y.y SSLVPN_Int

static (inside,outside) SSLVPN_ext SSLVPN_Int netmask 255.255.255.255 0 0

access-list SonicWallVPN line 1 permit tcp any host SSLVPN_Ext eq https (hitcnt=0)

Thanks in advance

stephan

tstanik · ‎10-25-2007

Configure following commands in PIX

static (inside,outside) SSLVPN_ext SSLVPN_Int netmask 255.255.255.255

access-list SonicWallVPN line 1 permit any host SSLVPN_Ext eq https

jaravinthan · ‎10-25-2007

though the answer seems to be dumb

is the ACL applied in outside interface in inward direction?

and configuring the NAT as

static (inside,outside) SSLVPN_ext 443 SSLVPN_Int 443 netmask 255.255.255.255 0 0

Matt Lang · ‎05-01-2008

Stephan,

I am experiencing the same thing. Did you ever get this to work?

Matt

jaravinthan · ‎05-04-2008

another silly check...

please try allowing HTTP as well towards the public IP and the below command

http 255.255.255.255