PIX-525 configuration problems

[andremgil]

Hello,

I have a remote user connected via IPSec tunnel to his company.

- The remote user is behing a PIX firewall (PIX-525 version 6.3)

- The exchange server is behind a VPN terminator (stonegate)

The user get to send email but NOT receive. If the remote user is not behind PIX, the email works well, therefore I think that the problem is in PIX configuration.

Can you help me? How can I solve this problem?

[sachinraja]

Hello andre,

Are there any access-lists on the inside of the firewall?? Is it a site-to-site or a remote access VPN ?

Raj

[andremgil]

Hello Raj,

It is a remote access VPN, on inside I don't have access-lists, just NAT (nat 1-1).

On outside, I have access-lists where ipsec ports (ESP-50, AH-51, ISAKMP-500,...) are allow.

The VPN tunnel is up, the connection to exchange server is up, I can send emails but not receive.

Do you think, that it can be a problem in acl configuration?

thanks

Andr?