connect to 501 pix from private network

[ctingeys8]

I have installed a 501 pix at a remote office and am using the vpn client 4.01 I can connect just fine from my dial up connection at home and can access what ever files and computers I need to However from my other office where I am in a private network behind a watchguard firewall using nat/patI can establish a connection but cannot connect to anything it appears that I am sending packets but not recieving them

any ideas would be great

[gfullage]

The PAT that the Watchguard is doing is stopping your IPSec packets. you can enable NAT-T on the PIx so that it and the VPn client will encapsulate the IPSec packets into UDP packets, which the Watchguard sould then be able to PAT properly.

The following v6.3 command on the PIX should get you going:

isakmp nat-traversal

Make sure the "Enable Transparent Tunnelling" checkbox is enabled on the VPN client connection properties also (should be on by default).