topic Re: Using VNC through PIX 515 in Network Security

Using VNC through PIX 515

robert.peters — Fri, 21 Feb 2020 07:16:27 GMT

We have set up a VPN connection with several users through our PIX 515 but have found that although they can get onto the internal network we cannot use VNC to access their remote desktops.

I believe a command can be used in relation to the access list to open ports 5800 & 5900 for both TCP and UDP but have no idea what the command is, and would be very grateful for some help!

Many thanks

Rob

Re: Using VNC through PIX 515

patrick.cannon — Thu, 04 Mar 2004 17:25:57 GMT

on the access list that you use to define interesting traffic for the vpn...

access-list acl_rem permit tcp >inside ip< >remote ip< eq 5800

access-list acl_rem permit tcp >inside ip< >remote ip< eq 5900

access-list acl_rem permit udp >inside ip< >remote ip< eq 5800

access-list acl_rem permit udp >inside ip< >remote ip< eq 5900

Re: Using VNC through PIX 515

robert.peters — Fri, 05 Mar 2004 11:59:01 GMT

Thanks!

Is it possible to use a global command that will allow this for all IP's as we would want any internal machine to connect to any user on the VPN.