Urgent

[kzhen]

Cisco VPN clinet needs to go out. What port/protocol needs to open in firewall? Please help!

[Tshi M]

I would think that you would have an ACL allowing the VPN pool address to access whatever ports you want outbound.

[Giuseppe Larosa]

Hello Ken,

see the following links:

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702999.shtml

http://www.cisco.com/en/US/products/sw/secursw/ps2308/products_qanda_item09186a00801c2dbe.shtml#auth

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080702992.shtml

and vpn client support page

http://www.cisco.com/en/US/products/sw/secursw/ps2308/tsd_products_support_series_home.html

You should allows UDP 500 (IKE) then IPSec or

IPSEc over UDP or over TCP.

Hope to help

Giuseppe