Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
562
Views
5
Helpful
2
Replies

Allow Cisco VPN Client Out

Go to solution
fasteddye
Level 1
Level 1

‎08-24-2010 04:42 AM - edited ‎03-11-2019 11:29 AM

We need to allow a computer on the inside of our network to connect to an outside network using Cisco VPN Client.  I have the external IP address of the outside network we are connecting to.  We have an ASA5520.  Would I setup a rule to allow TCP PPTP 1723 and IP GRE 47 to the external IP address I was given?  Would there be any other ports that would need to be allowed?

Thanks.

Labels:
0 Helpful
1 Accepted Solution

Accepted Solutions

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee

‎08-24-2010 05:29 AM

If you would like to allow outbound Cisco VPN Client, then you would need to allow the following:

UDP/500

ESP

UDP/4500

plus you would need to allow "inspect ipsec-pass-thru"

Cisco VPN Client uses IPSec for VPN.

Hope that helps.

View solution in original post

0 Helpful
2 Replies 2

Go to solution
Kureli Sankar
Cisco Employee
Cisco Employee

‎08-24-2010 05:17 AM

You need to configure inspect pptp. That should take care of it.

Follow this link: http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml#new

-KS

Go to solution
Jennifer Halim
Cisco Employee
Cisco Employee

‎08-24-2010 05:29 AM

If you would like to allow outbound Cisco VPN Client, then you would need to allow the following:

UDP/500

ESP

UDP/4500

plus you would need to allow "inspect ipsec-pass-thru"

Cisco VPN Client uses IPSec for VPN.

Hope that helps.

0 Helpful
Customers Also Viewed These Support Documents
Review Cisco Networking products for a $25 gift card