VPN use of Port 443

[imanco671]

Hello Community,

Most of my users are behind tight firewalls at remote locations, which do not allow the standard vpn ports of 50,500,4500 to pass.

Can I configure my Cisco VPN clients to use port 443?

Thanks in advance

[Richard Burts]

John

If your users are using the AnyConnect client then they will be using port 443. If your users are using the traditional IPSec client then it is not possible for the client to use port 443.

HTH

Rick

[imanco671]

Hi Rick,

Which one is better? The anyconnect or the traditional VPN client?

Thanks

John

[imanco671]

I dont think I have the licenses for AnyConnect. I think I am only liscened for VPN Peers: 250

So I guess I am stuck with using the traditional VPN clients. No way to use port 443 for the traditional vpn clients?

[Richard Burts · Accepted solution]

John

I do not mean to sound flip - but which one is best depends on how you want to define best.

The AnyConnect requires licensing and the IPSec does not. Does that make IPSec the better client? AnyConnect uses port 443 which is pretty much never blocked and the IPSec uses ISAKMP and ESP which sometimes are blocked. Does that make AnyConnect better? You already have the IPSec client installed and configured while the AnyConnect will require a new installation and additional configuration. Does that make IPSec better?  The IPSec client is a "mature" product so there is not any development of new features going on for this client and the new features will be developed for the AnyConnect. Does this make AnyConnect better?

From my personal perspective I would say that AnyConnect is better. But that does not necessarily make it better in your perspective.

HTH

Rick