Ip protocol 50 is part of an ipsec tunnel
-----Original Message-----
From: Harjith <harjith@inflowtechnologies.com>
To: mark@mjlnet.com <mark@mjlnet.com>; 'Doug Fox' <dfox168@hotmail.com>
CC: firewalls@securityfocus.com <firewalls@securityfocus.com>
Sent: Thu Sep 15 07:53:46 2005
Subject: RE: Ports for Cisco VPN 3000 Series
Hi Mark,
Client less VPN, does he mean SSL VPN clients.
ESP : IP Protocol 50. Is it like TCP port 50. Could you explain more
about this.
-harjith
-----Original Message-----
From: Mark Lewis [mailto:mark@mjlnet.com]
Sent: Wednesday, September 14, 2005 2:00 AM
To: Doug Fox
Cc: firewalls@securityfocus.com
Subject: Re: Ports for Cisco VPN 3000 Series
Ports relevant for IPsec VPNs:
ISAKMP traffic- UDP port 500.
ESP traffic- IP protocol 50.
AH traffic- IP protocol 51. Note that the Cisco VPN 3000 concentrator
does not support AH.
IPsec NAT traversal (depending on how you configure it):
Industry standard NAT-T uses UDP port 4500.
IPsec over a user defined TCP port (10000, by default, on the Cisco VPN
3000 concentrator). IPsec over a user defined UDP port (10000, by
default, on the Cisco VPN 3000 concentrator).
SSL clientless VPNs:
TCP port 443 (HTTPS).
Hope that helps,
Mark
---- Original message ----
Date: Thu, 8 Sep 2005 20:28:45 -0400
From: "Doug Fox" <dfox168@hotmail.com>
Subject: Ports for Cisco VPN 3000 Series
To: <firewalls@securityfocus.com>
Which ports should I open on the firewall allowing
"Site to Site" and "Client to Site" IP Sec VPNs as
well as Clientless VPNs?
By the way, can this Cisco VPN be placed in the DMZ
or behind the firewall on the internal network?
Any info/pointers are much appreciated.
Thanks,
------------------------------------------------------------------------
For more information about Barclays Capital, please
visit our web site at http://www.barcap.com.
Internet communications are not secure and therefore the Barclays
Group does not accept legal responsibility for the contents of this
message. Although the Barclays Group operates anti-virus programmes,
it does not accept responsibility for any damage whatsoever that is
caused by viruses being passed. Any views or opinions presented are
solely those of the author and do not necessarily represent those of the
Barclays Group. Replies to this email may be monitored by the Barclays
Group for operational or business reasons.
------------------------------------------------------------------------
