PIX 515 pptp vpn + pat

[jdl508]

Hello, I have been trying to get a vendor on a vpn to my pix 515 through pptp (win2k pro) anyway If they dial out they can access the vpn however through there network they cannot. After calling cisco they said if they have a pat'ed firewal they cannot vpn into our pix. Does this sound right? Anyway would a possible solution be for them to do a static translation of a box on there side and connect through it that way the box would not go through PAT. Any comments are greatly appreciated .
Thanks
jdl

 

[themut]

Hello jdl,

PPTP through PAT is not supported on the PIX. You should not have any issues with a static. You will need to open TCP port 1723 and protocol 47 (GRE).

PPTP through PAT will be supported on the new 6.3 version yet to be released. Hope this helps!