Solved

Setting up remote VPN access with aggressive mode disabled...

Posted on 2008-10-16
3
2,005 Views
Last Modified: 2012-05-05
I have been asked to solve a problem which I'm not very familiar with. I've setup remote VPN access before but not with these options. My company has to be PCI compliant and we have a firewall which we use for some partners to access our internal network.  We were recently told by our auditor that we could not have aggressive mode enabled on the VPN profiles.  But apparently we can't get the VPN connections to work once we turn off aggressive mode. I read somewhere that you can use certificates instead of pre-shared keys and that might solve the problem. But I'm trying to set that up and having problems. Anyone have any insight into how to make this work? (remote IPSec VPN with aggressive mode disabled?)
0
Comment
Question by:nmcnair
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 79

Expert Comment

by:lrmoore
ID: 22740217
What are the other endpoints for the VPN tunnels?
Main mode is the default, so you should be able to disable aggressive mode.
Suggest you update to 8.0.4 as there is a long list of bug fixes since 8.0.1

0
 
LVL 2

Author Comment

by:nmcnair
ID: 22742551
I upgraded to 8.0.4 this morning. All of the enpoints are Cisco VPN software clients (v 5.0.01.06) running on Widows boxes. I attempted this morning to setup self signed certifcates with a local CA server running on the SA but was unable to get it to work. I am tempted to go to Verisign and sign up for their managed PKI so I can use them as the CA but I'm not sure that's going to solve the problem.
0
 
LVL 2

Accepted Solution

by:
nmcnair earned 0 total points
ID: 22900812
never mind..I was able to get it to work with self signed certificates...
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I found an issue or “bug” in the SonicOS platform (the firmware controlling SonicWALL security appliances) that has to do with renaming Default Service Objects, which then causes a portion of the system to become uncontrollable and unstable. BACK…
Let’s list some of the technologies that enable smooth teleworking. 
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

690 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question