topic Re: VPN Cleint 4.X in Network Security https://community.cisco.com/t5/network-security/vpn-cleint-4-x/m-p/1253718#M787460 <HTML><HEAD></HEAD><BODY><P>if running code 7.x or above add ipsec pass-thru to global polciy for IPsec pass trhough </P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1740887" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1740887</A></P><P>pix-asa(config)# policy-map global_policy </P><P>pix-asa(config-pmap)# class inspection_default </P><P>pix-asa(config-pmap-c)# inspect ipsec-pass-thru </P><P>pix-asa(config-pmap-c)#exit</P><P></P><P>If PIX code 6.x you need to allow udp 500 (isakmp) , udp 4500 (nat-t) and esp protocol 50</P><P></P></BODY></HTML> Mon, 19 Oct 2009 02:58:32 GMT JORGE RODRIGUEZ 2009-10-19T02:58:32Z VPN Cleint 4.X https://community.cisco.com/t5/network-security/vpn-cleint-4-x/m-p/1253717#M787441 <P>Hi Guys,</P><P></P><P>I have a pc which has cisco vpn client 4.x installed on it and it is behind the company's pix firewall.</P><P></P><P>What ports are required to be open on the firewall so that it will allow outbound vpn connection from the pc. Is it UDP 500 or anything else?</P><P></P><P>Tks</P> Mon, 11 Mar 2019 16:27:15 GMT https://community.cisco.com/t5/network-security/vpn-cleint-4-x/m-p/1253717#M787441 kuldeep.kaur 2019-03-11T16:27:15Z Re: VPN Cleint 4.X https://community.cisco.com/t5/network-security/vpn-cleint-4-x/m-p/1253718#M787460 <HTML><HEAD></HEAD><BODY><P>if running code 7.x or above add ipsec pass-thru to global polciy for IPsec pass trhough </P><P><A class="jive-link-custom" href="http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1740887" target="_blank">http://www.cisco.com/en/US/docs/security/asa/asa82/command/reference/i2.html#wp1740887</A></P><P>pix-asa(config)# policy-map global_policy </P><P>pix-asa(config-pmap)# class inspection_default </P><P>pix-asa(config-pmap-c)# inspect ipsec-pass-thru </P><P>pix-asa(config-pmap-c)#exit</P><P></P><P>If PIX code 6.x you need to allow udp 500 (isakmp) , udp 4500 (nat-t) and esp protocol 50</P><P></P></BODY></HTML> Mon, 19 Oct 2009 02:58:32 GMT https://community.cisco.com/t5/network-security/vpn-cleint-4-x/m-p/1253718#M787460 JORGE RODRIGUEZ 2009-10-19T02:58:32Z