VPN IPsec pass-thru with Pix?

[skelian]

I replaced a Wathguard Firewall with a Pix 501. Since this migration, we are not able to establish a vpn tunnel with remote sites. Even if we use TCP 10000 port. The VPN software we are running is 4.0.5 and the Pix is running 6.3.3.

Thank you,

Sev

[sachinraja]

Hello skelian,

you need to open UDP port 500 , UDP 4500 . you should open ip protocol 50 & 51 for connecting to a vpn server from a client inside the firewall.

All the best !!

[skelian]

Hello Sachinraja,

I do not have outbound filtering configured on the Pix. Do I have to open these ports and protocols for incoming traffic or both?

I use NAT for outbound traffic configured with the global command.

Thank you very much.

Sev