Aventail "VPN" SSL SOCKS5 originating from PIX 501?
I have a fat windows client from Aventail on a XP box that provides "VPN" access (SSL SOCKS5) to a fortune 100 company. Is there a way to have a PIX 501 originate the vpn automatically? I would like to use a Solaris box on my side to access some of the other companies information.
Re: Aventail "VPN" SSL SOCKS5 originating from PIX 501?
You mean use a pix 501 instead of the software client? Not likely - pixen don't do SSL "vpns". Even if it that client is an IPSec client, they could be using not standard extensions, or authentication hardware that a pix cannot use to originate a connect (RSA securid, etc)
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...