PIX 515 dropping Terminal Server connections.

[jhaggett]

I have a PIX 515 which has VPN clients connecting from multiple locations. When two people VPN (using client software) in the pix from the same location, then connect to the terminal server, the VPN tunnel stays up, but, the TS sessions are dropped.

If one person connects in one location, and another in a totally different location, the TS sessions stay up perfectly.

These users are connecting using the Microsoft VPN client to the pix with PPTP.

Anyone have any ideas?

[rvdoever]

This is probably related to a router performing PAT at the remote location.

The router maybe translates all PPTP-sessions to the same IP-address and source-port, confusing the PIX.

Many types of soho-routers are able to handle outgoing PPTP sessions, verify if this one does.

In the case of an IPSec remote access VPN the solution would be to use PIX software 6.3, activate NAT-T (isakmp nat-traversal). Activate the 'Transparent tunneling'-option in the VPN-client.