How to restrict traffic between the VPN server and remote Cisco clients

You've actually identified your issue in your question. You have the "sysopt connection permit-ipsec" command in your configuration. This automatically allows VPN traffic into the internal network without filtering. If you want to apply specific port filters to the tunnel, disable the command and apply an access control list to the appropriate PIX interface. Granted, it's not the easiest thing to configure on a PIX, but it's technically possible.

Rate this Tip To rate tips, you must be a member of SearchMidmarketSecurity.com. Register now to start rating these tips. Log in if you are already a member. Digg This!     StumbleUpon     Del.icio.us    RELATED CONTENT Integrating security into networks Five network security issues to avoid How to rework your network infrastructure for security Streamlining your network security infrastructure Network-based integrity monitoring keeps website hacks in check How to make data loss prevention tools affordable and manageable for midmarket PCI DSS requirement: Building and maintaining a secure network Network security begins with device discovery and assessment NAC Basics: Laying the groundwork Understand the differences in network access control solutions Three steps to achieve security for smartphones within a budget RELATED RESOURCES 2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems Search Bitpipe.com for the latest white papers and business webcasts Whatis.com, the online computer dictionary DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.