zone security - part 2

Hi,

Just trying to understand why the following happens.

Trying to get a PPTP windows client to vpn through a zone based firewall.

have an inspect for all traffic from that host, that doesn't work.

Tried the inspect pptp option, that doens't work.

Apparently the only thing that works is passing (ie not inspecting) gre
traffic in both directions (and also having a pass or inspect rule for
the 1723tcp traffic).

Any ideas? Or just a bad implementation by cisco of their inspect pptp
and inspect gre on the ZBF?

Paul

Blogs and organic groups at http://www.ccie.net
Received on Sun Feb 13 2011 - 21:20:06 ART