PIX 515 Allowing Outbound VPN

[jcitassistant]

Good day to all,

Today I received a request from a user that needs to user a VPN server hosted on an outside network.   One of the requirements is that I allow outbound VPN.   Would someone kindly point me in the right direction in setting this up?  Many thanks ahead of time.

[Yudong Wu]

By default, PIX should allow the outbound traffic from high security interface to the low security interface.

VPN use the following port.

udp 500 <-- ISAKMP negociation

esp  (ip protocol # 50)  <-- if they use ESP.

udp 4500  <-- if there is NAT device between VPN server and client, all traffic will be encapulated in a UDP packet and use port 4500 when NAT-T is enabled.