topic Re: ARE you there feature in pix in Network Security https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648745#M497497 <HTML><HEAD></HEAD><BODY><P>Raj,</P><P></P><P>Does PIX 7.0 support the Are You There (AYT) feature?</P><P></P><P>A. Yes. In an AYT scenario, a remote user has a personal firewall installed on the PC. The VPN Client enforces the firewall policy defined on the local firewall, and it monitors that firewall to make sure that is runs. If the firewall stops running, the VPN Client drops the connection to the PIX or ASA. This firewall enforcement mechanism is called Are You There (AYT), because the VPN Client monitors the firewall by sending it periodic "are you there?" messages. If no reply comes, the VPN Client knows the firewall is down and terminates its connection to the PIX Security Appliance. The network administrator might configure these PC firewalls originally, but with this approach, users can customize their own configurations.</P><P></P><P></P><P>Please refer the below URL for details:</P><P></P><P>Pix 7.0 FAQ</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml#q7" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml#q7</A></P><P></P><P>Configuration Guide</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/vpngrp.htm" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/vpngrp.htm</A></P><P></P><P>I hope it helps.</P><P></P><P>Regards,</P><P>Arul</P></BODY></HTML> Wed, 13 Sep 2006 17:19:48 GMT ajagadee 2006-09-13T17:19:48Z ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648741#M497493 <P>Hi,</P><P></P><P>Can someone tell me how to configure this on a pix.</P><P></P><P>thanks</P> Fri, 21 Feb 2020 09:10:21 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648741#M497493 raj_bjs77 2020-02-21T09:10:21Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648742#M497494 <HTML><HEAD></HEAD><BODY><P>???</P></BODY></HTML> Wed, 13 Sep 2006 14:31:33 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648742#M497494 sachinraja 2006-09-13T14:31:33Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648743#M497495 <HTML><HEAD></HEAD><BODY><P>I have read that there is a feature called Are you there . This actually checks in the client computer for specific software and services and then only makes a vpn connection.</P><P></P><P>any idea ?</P><P></P><P>thanks</P></BODY></HTML> Wed, 13 Sep 2006 14:42:50 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648743#M497495 raj_bjs77 2006-09-13T14:42:50Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648744#M497496 <HTML><HEAD></HEAD><BODY><P>The feature you are looking for is called NAC (network admission controll). As far as I remember it is available on PIX with then new 7.2 release of PIX OS.</P></BODY></HTML> Wed, 13 Sep 2006 15:02:50 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648744#M497496 cscherb 2006-09-13T15:02:50Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648745#M497497 <HTML><HEAD></HEAD><BODY><P>Raj,</P><P></P><P>Does PIX 7.0 support the Are You There (AYT) feature?</P><P></P><P>A. Yes. In an AYT scenario, a remote user has a personal firewall installed on the PC. The VPN Client enforces the firewall policy defined on the local firewall, and it monitors that firewall to make sure that is runs. If the firewall stops running, the VPN Client drops the connection to the PIX or ASA. This firewall enforcement mechanism is called Are You There (AYT), because the VPN Client monitors the firewall by sending it periodic "are you there?" messages. If no reply comes, the VPN Client knows the firewall is down and terminates its connection to the PIX Security Appliance. The network administrator might configure these PC firewalls originally, but with this approach, users can customize their own configurations.</P><P></P><P></P><P>Please refer the below URL for details:</P><P></P><P>Pix 7.0 FAQ</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml#q7" target="_blank">http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_qanda_item09186a00805b87d8.shtml#q7</A></P><P></P><P>Configuration Guide</P><P></P><P><A class="jive-link-custom" href="http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/vpngrp.htm" target="_blank">http://www.cisco.com/univercd/cc/td/doc/product/multisec/asa_sw/v_70/config/vpngrp.htm</A></P><P></P><P>I hope it helps.</P><P></P><P>Regards,</P><P>Arul</P></BODY></HTML> Wed, 13 Sep 2006 17:19:48 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648745#M497497 ajagadee 2006-09-13T17:19:48Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648746#M497498 <HTML><HEAD></HEAD><BODY><P>thanks for the info..</P></BODY></HTML> Thu, 14 Sep 2006 06:38:08 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648746#M497498 raj_bjs77 2006-09-14T06:38:08Z Re: ARE you there feature in pix https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648747#M497499 <HTML><HEAD></HEAD><BODY><P>Pls elaborate on the question.</P></BODY></HTML> Tue, 10 Oct 2006 04:31:00 GMT https://community.cisco.com/t5/network-security/are-you-there-feature-in-pix/m-p/648747#M497499 aamathew 2006-10-10T04:31:00Z