topic Re: PIX will decrypt but not encrypt in Network Security https://community.cisco.com/t5/network-security/pix-will-decrypt-but-not-encrypt/m-p/79608#M655383 <HTML><HEAD></HEAD><BODY><P>Ensure you have a valid access list for your tunnel traffic set up.</P></BODY></HTML> Mon, 20 May 2002 19:57:52 GMT mmellet 2002-05-20T19:57:52Z PIX will decrypt but not encrypt https://community.cisco.com/t5/network-security/pix-will-decrypt-but-not-encrypt/m-p/79607#M655382 <P>I have a IPSEC/IKE tunnel successfully up between an IOS router (2600 series) and a PIX 520 firewall. The ISAKMP SA's show up fine, and the IPSEC SA's show correctly, with the correct peer, etc. A ping initiated from the IOS side gets to the PIX, and the PIX decrypts the traffic and puts it on the wire via the inside interface, just like it's supposed to. However, when the host on the PIX side responds to the ping, the PIX appears to be dropping the traffic destined for the IOS side, rather than encrypting it and putting it through the tunnel.</P><P></P><P>What am I missing here? What access-lists to I need to have in place so that the PIX sees the traffic headed out to the IOS side as interesting and encrypts it? PIX is version 6.0(1).</P> Fri, 21 Feb 2020 06:03:47 GMT https://community.cisco.com/t5/network-security/pix-will-decrypt-but-not-encrypt/m-p/79607#M655382 ebanksdhhs 2020-02-21T06:03:47Z Re: PIX will decrypt but not encrypt https://community.cisco.com/t5/network-security/pix-will-decrypt-but-not-encrypt/m-p/79608#M655383 <HTML><HEAD></HEAD><BODY><P>Ensure you have a valid access list for your tunnel traffic set up.</P></BODY></HTML> Mon, 20 May 2002 19:57:52 GMT https://community.cisco.com/t5/network-security/pix-will-decrypt-but-not-encrypt/m-p/79608#M655383 mmellet 2002-05-20T19:57:52Z