Re: Ports for Cisco VPN 3000 Series

Hi
The Cisco VPN concentrators use port 40000 udp and tcp (with the cisco 
vpn client).
They have 3 fethernet ports: 1 labeled as public (in/out encrypted 
traffic), 1 labeled as external (in/out encrypted traffic) and 1 labeled 
as private (in/out UNencrypted traffic). You can place the public port 
on the "dirty" network, with a public ip address and without the 
firewall..i think the private one should be better placed in DMZ, so you 
can control the clean traffic.

Bye

Marco

Doug Fox ha scritto:
> Which ports should I open on the firewall allowing "Site to Site" and 
> "Client to Site" IP Sec VPNs as well as Clientless VPNs?
>  
> By the way, can this Cisco VPN be placed in the DMZ or behind the 
> firewall on the internal network?
>  
> Any info/pointers are much appreciated.
>  
> Thanks,
>