Re: PIX - VPN with IPSec

Arek,
Generally, any Firewall cum VPN box can be configured to stop unwanted 
traffic coming thro VPN. Assume the VPN tunnel is between a.b.c.d/24 
(remote network) to w.x.y.z/24(local network), then create an inbound 
policy to allow packets coming from a.b.c.d/24 to w.x.y.z/24 allowing 
destination port 80  traffic if you want only web traffic to come in.

Hope this helps,
Cheers,
-Ravi


Arek Słomiński wrote:

> Hi Guys,
>
> Our company plans to establish an IPSec VPN tunnel to one of our customers. 
> Some resources should be shared for the customer and the easiest way is to let 
> secured access to the data via  Internet. We prepared testing environment with 
> PIX515 and Linksys VPN router. The data are crypted fine but there is no access 
> control within the VPN channel.
> We added PIX command "sysopt connection permit-ipsec" on PIX and it let's all 
> inbound traffic from Linksys router via IPSec tunnel, nothing even acls!!! I do not want 
> all inbound traffic welcome to my LAN behind PIX - all I need is for example access to 
> one web server inside.
> Pls, advise how to fix it.
>
> Regards
> Arek
>
>