Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Setting up remote VPN access with aggressive mode disabled...

Posted on 2008-10-16
Medium Priority
Last Modified: 2012-05-05
I have been asked to solve a problem which I'm not very familiar with. I've setup remote VPN access before but not with these options. My company has to be PCI compliant and we have a firewall which we use for some partners to access our internal network.  We were recently told by our auditor that we could not have aggressive mode enabled on the VPN profiles.  But apparently we can't get the VPN connections to work once we turn off aggressive mode. I read somewhere that you can use certificates instead of pre-shared keys and that might solve the problem. But I'm trying to set that up and having problems. Anyone have any insight into how to make this work? (remote IPSec VPN with aggressive mode disabled?)
Question by:nmcnair
  • 2
LVL 79

Expert Comment

ID: 22740217
What are the other endpoints for the VPN tunnels?
Main mode is the default, so you should be able to disable aggressive mode.
Suggest you update to 8.0.4 as there is a long list of bug fixes since 8.0.1


Author Comment

ID: 22742551
I upgraded to 8.0.4 this morning. All of the enpoints are Cisco VPN software clients (v running on Widows boxes. I attempted this morning to setup self signed certifcates with a local CA server running on the SA but was unable to get it to work. I am tempted to go to Verisign and sign up for their managed PKI so I can use them as the CA but I'm not sure that's going to solve the problem.

Accepted Solution

nmcnair earned 0 total points
ID: 22900812
never mind..I was able to get it to work with self signed certificates...

Featured Post

The Firewall Audit Checklist

Preparing for a firewall audit today is almost impossible.
AlgoSec, together with some of the largest global organizations and auditors, has created a checklist to follow when preparing for your firewall audit. Simplify risk mitigation while staying compliant all of the time!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Some of you may have heard that SonicWALL has finally released an app for iOS devices giving us long awaited connectivity for our iPhone's, iPod's, and iPad's. This guide is just a quick rundown on how to get up and running quickly using the app. …
I recently attended Cisco Live! in Las Vegas, a conference that boasted over 28,000 techies in attendance, and a week of hands-on learning hosted by a solid partner with which Concerto goes to market.  Every year, Cisco displays cutting-edge technol…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…
When cloud platforms entered the scene, users and companies jumped on board to take advantage of the many benefits, like the ability to work and connect with company information from various locations. What many didn't foresee was the increased risk…
Suggested Courses

577 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question