Cisco VPN client 3.0 idle connection times out in 3 mins.

[lbagdasarian]

Hi,

We recently are installed the CheckPoint 4.1 Firewall and all the PCs behind the firewall are getting disconnected in 3 min. when connected to PIX firewall via Cisco VPN client 3.0. The error is "IPSEC connection has been terminated".

The PIX site has the concentrator installed and configured to accept NATed connections.

It works fine when connected outside of Firewall or from another NATed network ( home firewall).

Could someone, please give me a hand?

[vijkrish]

Can you elaborate abit more on whether you are using IPSec over TCP or IPSec over UDP ? Does the problem happen in only one case or both the cases ?

[lbagdasarian]

Thanks for pointing this out. Looks like that we were using UDP since only UDP 10000 was opened on CheckPoint firewall, and there wasn't any options available on Cisco client 3.0 to change it to TCP.

This option is available on newer clients , and we are going to update it.

Also , we'll open TCP 10000 and will try connecting.

Hopefully, we'll have better luck with IPSEC over TCP.

I will post the result then.

What if the problem remains? What else can we try?

Thanks again for your response.