Solved: PIX firewall blocks VPN Clients

leonnikolaou · ‎09-28-2010

Hello guys,

I have a PIX 501 firewall in my company's network. When customers from outside come inside the company and they trying to

connect to their sites via Cisco VPN client, the PIX 501 stops the VPN connection.

Any suggestions?

Thank you

Regards

Leon

Jennifer Halim · ‎09-28-2010

It depends on which version of PIX you are running.

This is assuming that the PIX firewall is passing through IPSec tunnel:

Here is a sample configuration for PIX version 6.x:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml

Here is sample configuration for PIX version 7.x and above:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml

Hope that helps.

View solution in original post

Jennifer Halim · ‎09-28-2010

Do you mean the VPN connection pass through the PIX firewall? or terminate on the PIX firewall?

If it passes through the PIX firewall:

1) What version of PIX firewall do you have?

2) Are you configuring static NAT for the VPN traffic?

3) Have you configure ACL to allow the VPN traffic?

4) What VPN protocol are you using? IPSec? PPTP? L2TP over IPSec?

leonnikolaou · ‎09-28-2010

Hi Jennifer,

The PIX is not configured for VPN, this is for sure. To be honest, I need to make a password recovery on that PIX cause I just came into this company

and they have lost the password of the PIX. I'm not really familiar with PIX firewalls so could you pls tell me any commands (natting, acls) that allows VPN

traffic to pass through the firewall?