About Jesterino

Jesterino · 08-09-2007

HiI have a PIX 515E 6.3(5) and I have a problem I simply cannot find an answer for!We use a certificate for a VPN we have with a 3rd party, and the certificate is due for renewal in the next couple of weeks. The guy that did this originally has left...

Jesterino · 08-16-2007

Incorrect.Interfaces have a security level. The higher the number, the more 'secure' it is. By default traffic on a higher security level interface is permitted to pass onto a lower security level interface. This is why traffic on your inside inter...

Jesterino · 08-16-2007

Are you sure about that? It works even without an 'access-group inside_access_in in interface inside' config line?I do not agree with your statement.

Jesterino · 08-16-2007

Which is something else I mentioned in my first reply!'Alternatively, you can apply this to an inside access list, if you have one.'In quite a few cases I have seen no inside access list, which is why I suggested the outside interface first.

Jesterino · 08-16-2007

Correct - the VPN device they are connecting to sends ESP traffic back through your firewall on port 500/udp. I have found by blocking this port the traffic does not come back to the client on my network, which is your desired result.

Jesterino · 08-14-2007

Thanks.Can you advise if the VPN will stay up during this renewal process?

Member Since	‎08-09-2007 01:19 AM
Date Last Visited	‎08-18-2017 03:56 AM
Posts	10
Total Helpful Votes Received	7

User Statistics

User Activity

PIX 6.3(5) Certificate renewal

Re: Block Outgoing VPN Access

Re: Block Outgoing VPN Access

Re: Block Outgoing VPN Access

Re: Block Outgoing VPN Access

Re: PIX 6.3(5) Certificate renewal