Our VPN 3030 Concentrator is sitting in the DMZ zone of our firewall. The ACS is sitting behind the firewall inside our LAN. Our mobile users are authenticated through the ACS server when they wants to establish a VPN connection to our network. Currently I allow all TCP/UDP ports from the Concentrator to the ACS. I am asked to change this to just open the necessary TCP/UDP ports, i.e, only the TCP/UDP ports needed by the ACS to work will be allowed to flow from the Concentrator to the ACS. What TCP/UDP ports must I open in order ACS to work? Thanks.
