We need to allow a computer on the inside of our network to connect to an outside network using Cisco VPN Client. I have the external IP address of the outside network we are connecting to. We have an ASA5520. Would I setup a rule to allow TCP PPTP 1723 and IP GRE 47 to the external IP address I was given? Would there be any other ports that would need to be allowed?
If you would like to allow outbound Cisco VPN Client, then you would need to allow the following:
UDP/500
ESP
UDP/4500
plus you would need to allow "inspect ipsec-pass-thru"
Cisco VPN Client uses IPSec for VPN.
Hope that helps.
Getting Started
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:
