cisco vpn client

[oddyager]

after installing cisco vpn client on a local machine, other machines can not remote control nor ping this machine. However this machine can ping out and remote control others. the client isn't enabled and the cisco adapter it installs is disabled (no vpn sessions going on). I can't seem to find anything that would be filtering inbound connections related to this client. One thing I did discover is that after turning off the VPN service from MS Services the problem goes away. So my question is, what exactly is this service doing thats filtering inbound connectivity? Has anyone seen this before?

 

[spidey07]

The client most likely has a firewall built-in or it forces your machine to run one.

 

[oddyager]

yeah i double checked if it enabled windows xp firewall but thats disabled and i'm not running any other firewall software on it. this is something that is not configurable i take it?

 

[spidey07]

The integrated firewall is controlled by whoever administers the VPN client.

 

[oddyager]

Yes you're right. Stateful firewall setting on the client was turned on. Disabled it and everything is okay.

 

[spidey07]

Originally posted by: oddyager
Yes you're right. Stateful firewall setting on the client was turned on. Disabled it and everything is okay.

LOL!

Smack whoever administers the client. You not supposed to be able to do that.

 

[oddyager]

Originally posted by: spidey07

Originally posted by: oddyager
Yes you're right. Stateful firewall setting on the client was turned on. Disabled it and everything is okay.

LOL!

Smack whoever administers the client. You not supposed to be able to do that.

I may but I'm guessing the policy they gave us did not allow split tunneling and this is required if we need to talk through the tunnel to a protected remote network and at the same time be able to allow connectivity in and out in our local subnet, right?

 

[spidey07]

Smack the admin again, not supposed to allow split tunneling either.

 

[err]

i like split tunneling although less secure .. yes i completely understand.. however its always nice to be able to let users roam to their own network with split tunneling.

 

[oddyager]

Hmm, what options are available? they send us this client+profile so we can connect to their network but I also need other machines in my local netwoprk be able to talk to mine while this is happening.