Permit PPTP out of the ASA to an external server

[Brendan Wood]

It seems when I configure a firewall with Windows (PPTP), it's not connecting when behind the ASA firewall.  The PPTP server is external to our office and we want a client from our office to connect to it.

Tried the connection over a cell phone line, and it works fine.

My ASA5505 version is 

ASA Version 9.2(4)

Please note I've got beginner knowledge of ASA configuration, if you can layman down your answer please :)

Thanks.

[Aditya Ganjoo · Accepted solution]

Hi Brendan,

Please check the following link:

http://www.cisco.com/c/en/us/support/docs/security/pix-500-series-security-appliances/18806-pix-pptp.html

You need to permit PPTP traffic through the ASA.

Regards,

Aditya

Please rate helpful posts and mark correct answers.

[johnlloyd_13 · Accepted solution]

hi,

try adding this on the global inspection policy.

policy-map global_policy
 class inspection_default
  inspect pptp

basically, the ASA will do a stateful inspection and keeps track of the PPTP sessions sourced from the 'inside' and allow its return traffic.