Is VPN traffic implicitly permitted to go through the firewall?

[paulnigel]

Hi forum,

I am setting up a vpn tunnel across the PIX firewall, can the access-list block the VPN traffic?

Is VPN traffic implicitly permitted through the firewall?

what is the sysopt permit ipsec for?

Thanks,

paul

[mohammed.ibrahim]

sysopt permit connection ipsec is to prevent the outside access-list from checking the decrypted access-list. In 6.3(5) the default behaviour is to check the decrypted traffic