Controlling traffic in an ipsec tunnel on vpn3005

foster177 · ‎06-01-2006

Is there any way to control or firewall the traffic that goes through an ipsec tunnel from a client PC to our vpn3005? I would like to allow only http, https and ssh from clients in the field to our network by restricting the ipsec tunnel traffic. Is this possible?

Vikas Saxena · ‎06-02-2006

Hello,

Thankfully you are using a conc. otherwise you would have started getting nightmares by now.

You can define filters for the VPN tunnels and they can be very granular.

Check the administration guide for the conc. Use

VPN Concentrator 3005 administration Guide.

Vikas

foster177 · ‎06-02-2006

my understanding is that filters do not control traffic that goes into the tunnel.

Vikas Saxena · ‎06-05-2006

Hello,

Sorry for the delay,

Yes filters do control the traffic that goes into the tunnel.

Check out Policy Management and Tunneling and Security menus of the GUI.

Also,

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00803ee22f.html#wp1000192

Vikas