VPN client behind PIX problem

[3t.sage]

VPN client 3.6 on inside interface of PIX cannot do NAT transversal thru PIX to remote sites. Anyone know a possible solution to allow clients thru the PIX ?

Thanks

[engel]

I find no problem with NAT Travesal behind a PIX 501 version 6.2(1). The clients are 3.6.1 and 3.5.4 and the Concentrator is v3.6.1.

For IPSec over UDP, at least you have to permit UDP port 500 and UDP port 10000 on the PIX.

For IPSec over TCP, it is only using TCP port 10000, so you can deny else.