Solved

Client VPN through Pix Firewall

Posted on 2009-05-18
2
287 Views
Last Modified: 2012-05-07
I have a Pix that maintains two vpns to other companies. The traffic accross the vpn's are for the 10.246.x.x, 10.248.x.x, 10.250.x.x, 10.64.x.x, and 10.102.x.x subnets. Now I have a workstation behind the pix that is going to use the Cisco VPN client to connect to another company. The vpn is for the 10.254.13.0 subnet. The vpn client succresfully connects. However, I then launch a secure FTP client but it never connects to the ftp server across the vpn. I can't ping anything across the vpn on the workstation. I have this statement on the Pix for the other vpns:
access-list nonat permit ip 192.168.230.0 255.255.255.0 10.0.0.0 255.0.0.0

Could this statement be preventing the desktop's vpn from passing traffic correctly?
pix.txt
0
Comment
Question by:ccptechs
2 Comments
 
LVL 43

Accepted Solution

by:
JFrederick29 earned 500 total points
Comment Utility
No, most likely its because the "other company" that this desktop is connecting to doesn't have NAT-T enabled on their VPN server.  I would contact their support and see if they will enable it.
0
 

Author Closing Comment

by:ccptechs
Comment Utility
Need to ask another question
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

If you have an ASA5510 then this sort of thing would be better handled with a CSC Module, however on an ASA5505 thats not an option, and if you want to throw in a quick solution to stop your staff going to facebook during work time, then this is the…
Overview The Cisco PIX 501, PIX 506e, ASA 5505 and ASA 5510 (most if not all of this information will be relevant to the PIX 515e but I do not have a working configuration handy to verify the validity) are primarily used within small to medium busi…
Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

8 Experts available now in Live!

Get 1:1 Help Now