Allowing CISCO VPN Client Traffic in ISA Server

I thought that this might be easy since all that may be required would be allow the IPSec and IKE Client traffic through a rule in ISA. But no it did not work.

To allow a CISCO client via IPSec/UDP to connect through an ISA 2006 firewall, I had to create custom protocol as under:

Port Number: 500
Protocol Type: UDP
Direction: Send Receive

Port Number: 4500
Protocol Type: UDP
Direction: Send Receive

Port Number: 10000
Protocol Type: UDP
Direction: Send Recieve

I added all the ports in one custom protocol defination without Secondary Connections and then added an Access Rule to allow traffic from Internal to External for the above created custom protocol. Problem solved and the connections were now possible.

Leave a Reply

Your email address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.

You May Also Like