topic Re: Contivity Client behind pix firewall in Network Security https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298649#M593102 <HTML><HEAD></HEAD><BODY><P>How are you trying to connect to the firewall at work? IPSec vpn between your workstation at home and the corp. firewall (Contivity), IPSec between PIX and Contivity, pptp, or ssl?</P><P></P><P>If you use IPSec and the pix is not the termination point, then you need to allow udp port 500 (both src and dest ports are eq to 500), esp. You many need to allow the ah protocol as well. So you need to code at least 2 if not 3 statements in an acl and bind that to the outside interface of the pix.</P><P></P><P></P></BODY></HTML> Tue, 27 Apr 2004 16:01:18 GMT ehirsel 2004-04-27T16:01:18Z Contivity Client behind pix firewall https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298647#M593099 <P>Running version 6.3(3) on a pix 501 firewall connecting to the internet using pppoe and I'm having trouble getting connected to my firewall at work (Contivity firewall) through my pix firewall. Can someone help me out with this one?</P> Fri, 21 Feb 2020 07:21:56 GMT https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298647#M593099 cobbc 2020-02-21T07:21:56Z Re: Contivity Client behind pix firewall https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298648#M593101 <HTML><HEAD></HEAD><BODY><P>your best bet is to log everything, and see what it is doing. darn near every vpn client can do some weird proprietary things.</P><P></P><P></P></BODY></HTML> Mon, 26 Apr 2004 12:52:10 GMT https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298648#M593101 mostiguy 2004-04-26T12:52:10Z Re: Contivity Client behind pix firewall https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298649#M593102 <HTML><HEAD></HEAD><BODY><P>How are you trying to connect to the firewall at work? IPSec vpn between your workstation at home and the corp. firewall (Contivity), IPSec between PIX and Contivity, pptp, or ssl?</P><P></P><P>If you use IPSec and the pix is not the termination point, then you need to allow udp port 500 (both src and dest ports are eq to 500), esp. You many need to allow the ah protocol as well. So you need to code at least 2 if not 3 statements in an acl and bind that to the outside interface of the pix.</P><P></P><P></P></BODY></HTML> Tue, 27 Apr 2004 16:01:18 GMT https://community.cisco.com/t5/network-security/contivity-client-behind-pix-firewall/m-p/298649#M593102 ehirsel 2004-04-27T16:01:18Z