Question : Ports needed to be opened

I am planning on deploying a SonicWall TZ150 to create an IPSec VPN and would like to know what ports need to be opened on a firewall to allow the VPN to connect. I am installing this solution on a Government facility and need to reqest the correct ports to be opened. I tried to install the device on the network last week and it would not connect. It would allow communication through port 80 but it looked like the problem was UPD port 500 but I want to make sure what ports I need to request to be opened.

Answer : Ports needed to be opened

I don't know about the particular device you are using, but for IPsec VPNs to work you need the following:

IPsec generally needs UDP 500 for IKE (Internet Key Exchange).  You will also need AH (Authentication Header) and ESP (Encapsulated Security Payload) IP protocols to be allowed (51 and 50).  You may also need IPsec NAT-T which is UDP 4500.

Finally, it is often necessary to allow fragmented IP packets, as encrypted packets are often big.