topic Re: PIX firewall blocks VPN Clients in Network Security

PIX firewall blocks VPN Clients

leonnikolaou — Mon, 11 Mar 2019 18:46:29 GMT

Hello guys,

I have a PIX 501 firewall in my company's network. When customers from outside come inside the company and they trying to

connect to their sites via Cisco VPN client, the PIX 501 stops the VPN connection.

Any suggestions?

Thank you

Regards

Leon

Re: PIX firewall blocks VPN Clients

Jennifer Halim — Tue, 28 Sep 2010 13:39:01 GMT

Do you mean the VPN connection pass through the PIX firewall? or terminate on the PIX firewall?

If it passes through the PIX firewall:

1) What version of PIX firewall do you have?

2) Are you configuring static NAT for the VPN traffic?

3) Have you configure ACL to allow the VPN traffic?

4) What VPN protocol are you using? IPSec? PPTP? L2TP over IPSec?

Re: PIX firewall blocks VPN Clients

leonnikolaou — Tue, 28 Sep 2010 14:01:42 GMT

Hi Jennifer,

The PIX is not configured for VPN, this is for sure. To be honest, I need to make a password recovery on that PIX cause I just came into this company

and they have lost the password of the PIX. I'm not really familiar with PIX firewalls so could you pls tell me any commands (natting, acls) that allows VPN

traffic to pass through the firewall?

Thank you

Leon

Re: PIX firewall blocks VPN Clients

Jennifer Halim — Tue, 28 Sep 2010 14:07:26 GMT

It depends on which version of PIX you are running.

This is assuming that the PIX firewall is passing through IPSec tunnel:

Here is a sample configuration for PIX version 6.x:

http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a008009486e.shtml

Here is sample configuration for PIX version 7.x and above:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008045a2d2.shtml

Hope that helps.

Re: PIX firewall blocks VPN Clients

leonnikolaou — Tue, 28 Sep 2010 14:17:55 GMT

These configuration will really help. The PIX Version is 6.3 (5)

Thanks a lot Jennifer.