RE: Cisco VPN Client Behind Firewall

There may be some information regarding this on the Virtual Private Network 
Consortium site at http://www.vpnc.org.  There are many interoperability docs 
available there.  Not sure if this info is there, as I haven't looked for this 
specific information myself.  This is a great site and I would recommend 
browsing it.

--daniel

-----Original Message-----
From: ext Richard St John [mailto:Richard.StJohn@gbe.com]
Sent: Wednesday, December 21, 2005 5:12 AM
To: firewalls@securityfocus.com; vtlists@wyae.de
Subject: Re: Cisco VPN Client Behind Firewall


Thanks for all the information

I guess I should clarify. I have no issues passing it through my own
firewall and have done so, in our testing. Analysis of the traffic from
our VPN clients shows:

UDP 10000 {source and destination port}
UDP 500 {source and destination port}
UDP 62515
UDP 4500  {source and destination port}

The traffic is slightly different when we use iPass {3rd party
connectivity client} versus just the Cisco VPN.

The issue is when we have our personnel onsite at another company
{vendor/customer} and THEIR IT personnel want to know how to pass the
traffic through their XYZ firewall. Unfortunately, not all of the
companies we deal with have the sharpest personnel. 

I was hoping that there was a web site that I could point these people
to and say,"Here is a website that show you how you change your XYZ
firewall to allow the Cisco VPN" I have to be concerned that if I tell a
company how to modify their own security posture and they make a mistake
that my company is not liable.

RS