sysopt connection permit-ipsec a n d acl's?

["Meindert Uitman" <meindert.uitman () avic nl>]

Hello,
I'm connecting vpn client 3.5 to a pix 515. all seems to run ok, but to be
able to ping inside hostst, i must include icmp permit rule. i thought that
'sysopt connection permit-ipsec' implicitly permitted all ipsec traffic? (of
course there is an acl to ommit nat)
It seems that TS application does work.

Regards, meindert.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards