VPN 3005 filters stop working after 10 to 15 minutes ?

[okeblawi]

I recently moved my 3005's public interface directly to the Internet (was behind PIX on DMZ). I created an appropriate filter set for the public Interface - blocking all management ports etc... and allowing traffic vpn traffic.

( I found out that icmp HAS to be enabled to allow clients to connect..)

After applying the filters, I can connect successfully for approximately 10 to 15 minutes... after that time I can no longer connect or ping the concentrator until it is rebooted.

I have tried using a lot of combinations of filters in different orders as well as the ANY-IN and ANY-OUT filter as well.

any clue ?

Thanks - Mike

[okeblawi]

I figured it out.... (face turns red)

I 'thought' I had removed the Static Trans. rule on the PIX from the previous configuration.

It is interesting that the Concentrator would work for a little while though ...

Mike