How to limit one ip address to have remote access VPN to PIX?

[kokkeong-low]

I would like to allow only 1 public ip to have remote access vpn to a PIX 506E,

already remove sysopt connection permit-ipsec.

apply access-list on the outside interface, VPN tunnel still can be establish even if I, apply acl with deny ip any any.

Can any one help?

[ivillegas]

access list coule be the better option try reconfiguraing the access-list

[burim-koso]

Hi

In this case the access-list will have no effect,

If you have a router in front of the pix you can do the restrictions there.

regards

Burim

[kokkeong-low]

There is no way to do it ?

[kokkeong-low]

the problem is this is a broadband connection to isp, the broadband router does not have any firewall capability.

[burim-koso]

Hi

to make this remote access more secure i would say to you try to implement certificate authentication and aaa, this the best way i think

regards

Burim