Using VNC through PIX 515

[robert.peters]

Hi

We have set up a VPN connection with several users through our PIX 515 but have found that although they can get onto the internal network we cannot use VNC to access their remote desktops.

I believe a command can be used in relation to the access list to open ports 5800 & 5900 for both TCP and UDP but have no idea what the command is, and would be very grateful for some help!

Many thanks

Rob

[patrick.cannon]

on the access list that you use to define interesting traffic for the vpn...

access-list acl_rem permit tcp >inside ip< >remote ip< eq 5800

access-list acl_rem permit tcp >inside ip< >remote ip< eq 5900

access-list acl_rem permit udp >inside ip< >remote ip< eq 5800

access-list acl_rem permit udp >inside ip< >remote ip< eq 5900

[robert.peters]

Thanks!

Is it possible to use a global command that will allow this for all IP's as we would want any internal machine to connect to any user on the VPN.