VPN Cleint 4.X

kuldeep.kaur · ‎10-18-2009

Hi Guys,

I have a pc which has cisco vpn client 4.x installed on it and it is behind the company's pix firewall.

What ports are required to be open on the firewall so that it will allow outbound vpn connection from the pc. Is it UDP 500 or anything else?

Tks

JORGE RODRIGUEZ · ‎10-18-2009

if running code 7.x or above add ipsec pass-thru to global polciy for IPsec pass trhough

pix-asa(config)# policy-map global_policy

pix-asa(config-pmap)# class inspection_default

pix-asa(config-pmap-c)# inspect ipsec-pass-thru

pix-asa(config-pmap-c)#exit

If PIX code 6.x you need to allow udp 500 (isakmp) , udp 4500 (nat-t) and esp protocol 50

Jorge Rodriguez