requiring a client firewall be present when connecting to VPN

[WILLIAM STEGMAN]

Is there a way to set the require firewall feature of a group, as is present for a vpn concentrator, for clients making a vpn connection via a PIX, or is that the additional feature set buying a concentrator gets you?

Thank you,

Bill

[bob.bartlett · Accepted solution]

go into Group-policy configuration for the policy you are wanting to change and use the below command.

client-firewall [opt | req | none]

[Fernando_Meza · Accepted solution]

Hi .. pleae be aware that this is supported on 7.X code

client-firewall none

client-firewall {opt | req} custom vendor-id num product-id num policy {AYT | CPP acl-in acl

acl-out acl} [description string]