For details on cookie usage on our site, read our Privacy Policy
SSL VPN client ports
- LIVEcommunity
- Discussions
- General Topics
- SSL VPN client ports
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
SSL VPN client ports
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-23-2011 07:26 AM
We have a few officers that connect from a remote location with a firewall of its own. They are all using the SSL VPN client to connect back to home. I can pull up the https://external-ip and login, but when the connection starts up i get a Disconnected; unable to connect to remote client.
I need to know what ports the SSL VPN client uses to connect back to our firewall so I can tell the IT guy what ports to open.
Thanks in advance!
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-23-2011 11:33 AM
Also high priority, the people using this VPN can't do their reports unless they have the VPN connection.
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-23-2011 04:31 PM
If you do not have IPsec enabled, SSL VPN will use TCP 443. If IPSec is enabled. TCP 443 will be used for authentication and the traffic will use UDP port 500.
- Mark as New
- Subscribe to RSS Feed
- Permalink
03-23-2011 09:23 PM
I believe UDP port 4501 is used for the UDP encapsulated ESP (IPSEC) transit channel.
Cheers,
Kelly
- Mark as New
- Subscribe to RSS Feed
- Permalink
04-06-2011 10:45 AM
We disabled IPsec on our PA500. Tried reconnecting the SSL Client but still getting the same error. I can see the clients attempting to connect but are never assigned an IP address from my SSL pool; but other clients are getting IP addresses. Is it possible that 443 is used for authentication and another port is used for data ?
Is there a debug command i can use to view authentications and data coming into the firewall?
- Not recognizing standard ports like smtp. Instead showing as Not-Applicable and blocking in General Topics
- Panorama push errors None after upgrade in General Topics
- DHCP Relay: multi-hop, session management and IoT Security in General Topics
- Global protect client to access IPSEC peer networks. in General Topics
- OktaSAML authencation is not working with MacOS Globalprotect in GlobalProtect Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
