Microsoft PPTP VPN + Cisco PIX 506E

I'm having tremendous difficulty getting the PPTP client built into XP SP2 to connect to a server behind a Cisco PIX 506E router. I've forwarded port 1723 (TCP, UDP), and I've even tried using port 47 (as suggested by some other forums). No luck getting any response from the server.

The issue I've noticed is that MS's PPTP client uses one of a number of ports to try to establish a connection to the server. With the forwarding rules I tried to implement, it only allowed 1723, but that is apparently not the default port for MS's VPN client. Can someone help me in either pointing out what I'm doing wrong with the PPTP forwarding rules or maybe suggest an alternate VPN tool. I was trying to stick with the tools built into Windows, but if there's something that works better with Cisco hardware, I'm willing to try that.

Also, I've tried getting the Cisco Easy VPN utility, but I do not have a valid account as I'm replacing the group that initially ordered the PIX router.

Here is Cisco's doc on PPTP through the PIX.  There are a couple different sections for 6.x config that should help on your 506e.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080094a5a.shtml

This doc shows PPTP TO the PIX in case you're interested in that.

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a0080143a5d.shtml

As you suggest, PPTP is probably not the best remote VPN solution.  Doing IPSec with the Cisco VPN Client is probably the most straightforward way to go.  Once you get a hold of a service contract I would check that out.

Alternatively, if you're in the market for new hardware, buying an ASA 5505 will allow you do do SSL VPN in addition to IPsec (and L2TP/IPsec).

Matt
CCSP
http://www.wr-mem.com