VPN3000 and CPP firewalling

[adekloet]

When I use the 'Centralized Protection Policy' in

a Cisco VPN concentrator and I push a policy to the client, does that policy stay in effect(like the always on option) , when the tunnel is disconnected, or is it (as I expect) that the policy is removed when the tunnel is disconnected ?

Thanks and regards,

Alex

[atdhingr · Accepted solution]

It doesn't stay in effect ,CPP policy is for only internet traffic..not for tunnel traffic...it is pushed when vpn client connects to concentartor.

once session drops ...we loose all policies.

Thanks

Atul.

[adekloet]

Thanks Atul, thats what my current tests also show me, no i am sure,

regards

Alex