cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
411
Views
0
Helpful
2
Replies

clienless webvpn and reflexive access list firewall

luboto1902
Level 1
Level 1

I have a Cisco Router 3825 with WEBVPN server and Reflexive access list Firewall. All is well but when i try from outside to go to WEBVPN server and try trought WEBVPN site to open some web Site it dosen`t work. For example when i try to open yahoo.com, the log shows

"%SEC-6-IPACCESSLOGP: list ACL-FILTER-IN denied tcp 98.138.253.109(80) -> my_ip_address(45341), 1 packet  [ACL_ERROR]"

98.138.253.109 is yahoo.com ip address

Can you give my advice how to solve this problem? 

2 Replies 2

If you have WEBVPN, then you have the Security-image/license on your router. That means that you are not restricted to reflexive ACLs, you can use a "real" firewall-feature like CBAC or ZBF on that device.

Yes I can use ZBF or CBAC, but in my expience  with those two types of Firewalls the Router works very slowly. Therefor i want to use Reflective Access List, can you give my any advice  how to solve this problem?    

Review Cisco Networking for a $25 gift card