Contivity Client behind pix firewall

[cobbc]

Running version 6.3(3) on a pix 501 firewall connecting to the internet using pppoe and I'm having trouble getting connected to my firewall at work (Contivity firewall) through my pix firewall. Can someone help me out with this one?

[mostiguy]

your best bet is to log everything, and see what it is doing. darn near every vpn client can do some weird proprietary things.

[ehirsel]

How are you trying to connect to the firewall at work? IPSec vpn between your workstation at home and the corp. firewall (Contivity), IPSec between PIX and Contivity, pptp, or ssl?

If you use IPSec and the pix is not the termination point, then you need to allow udp port 500 (both src and dest ports are eq to 500), esp. You many need to allow the ah protocol as well. So you need to code at least 2 if not 3 statements in an acl and bind that to the outside interface of the pix.