Mark,

Your firewall shouldn't have any problems with keeping a state table open
for the ISAKMP trsaffic but I have noticed that a lot firewalls do not
keep a state table open for non-TCP or UDP traffic. I have not worked
with the PIX in a few years so maybe they do that now. I would check the
IPSEC logs on the PIX that the VPN is being established with too. I
remember they were pretty detailed.

Regards,
Jeffery Gieser
_______________________________________________
Firewalls mailing list
Firewallslists.gnac.net
http://lists.gnac.net/mailman/listinfo/firewalls

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]