More often than not, IPSec VPN ports are usually open in the firewall. If it is not, you can make it work by opening UDP port 500. This allows ISAKEP traffic to get forwarded through your firewalls. It also permits IP protocol IDs 50 to allow ESP traffic and 51 to allow AH traffic. The traffic is forwarded on firewall filters – both inbound and unbound.