ISA Server & Cisco VPN Client

[QCumber]

Hi there,

I use Cisco VPN client 4 to connect to my PIX firewall at the office. I will be working at a remote site for the next few weeks and discovered yesterday that my Cisco VPN client can't get out through their ISA server.

What do I need to add or change in the ISA config to allow the VPN client to connect to the PIX? The ISA server is acting as a firewall / proxy only with no VPN services.

TIA,

S.

 

[QCumber]

Forgot to add that I've configured access for ports 500 and 4500 as per Microsoft Knowledge Base Article - 812076 but I still can't get a connection.

S.

 

[Stavroche]

Hello, you've answered your own question, the Microsoft article is exactly what you have to do if that doesn't work than it is either an ISA problem or a client problem. I've seen client issues with VPN client so update to the very latest, with default settings for connecting. An ISA services might need to be restarted if the box is hokey but I've used ISA for a while, ran into this, applied the Microsoft solution by creating the defs and then creating the protocol rule, and it worked within a minute of applying those changes.

 

[wirehead8]

Did you ever get the Cisco Client to get through the ISA server? I have the same problem and not getting anywhere as of yet.

Thanks

 

[nhidalgo]

I had the same problem. Here is how i got it working

Create two new Protocol definitions on the Server for Upd access
- Udp Port 500 for Send and Receive
- Udp Port 10,000 for Send and Receive
Create a new Protocol Rule to allow These protocol to be used and apply it.(Make sure it is set to Send/Receive, the default is recieve/send)

Client Computer Setup – Done on each computer using the service
Set the default gateway of the computer to the ISA servers Ip address. This puts the computer in Secure Nat Mode
- Install the Cisco Vpn Client
- Run the “Vpn Dialer” click on options and then properties, put a check in “Enable Transparent Tunneling” and also click on “allow IPsec Over UDP(Nat/Pat)”
- Click Ok and then Connect

This should do the job for you.

Nick