Firewall Wizards mailing list archives

RE: PIX for VPN and NAT?


From: aryoung () unipass com (Alan Young)
Date: Wed, 10 Jan 2001 11:50:01 -0800

RE: [fw-wiz] PIX for VPN and NAT?Beware
Check the CISCO web site, we had a problem with the NAT not properly
supporting FTP. It was a bug in the 12.X IOS and we had to downgrade the IOS
to a previous, good system 11.x IOS
Alan Young
  -----Original Message-----
  From: firewall-wizards-admin () nfr com
[mailto:firewall-wizards-admin () nfr com]On Behalf Of Ian Stong
  Sent: Tuesday, January 09, 2001 5:04 AM
  To: 'J. Eric Townsend'; firewall-wizards () nfr com
  Subject: RE: [fw-wiz] PIX for VPN and NAT?


  Yes,  the PIX is quite capable of using NAT, PAT (port address
translation) and VPN setup/teardown all on the same box.   Certainly there
are issues to watch out for - specifically performance.  If you have a lot
of remote users doing VPN simultaneously you'll want plenty of memory and a
good speed system.

  Thanks,

  Ian

  -----Original Message-----
  From: J. Eric Townsend [mailto:jet () icras com]
  Sent: Monday, January 08, 2001 5:16 PM
  To: firewall-wizards () nfr com
  Subject: [fw-wiz] PIX for VPN and NAT?




  Has anyone used a PIX for both VPN and NAT at the same time?

  I've got the typical Class-A behind a PIX, but would like to support
  VPN coming in thru the same unit.  It seems like it should work, but I
  doin't want to go down a path if others have seen it has a dead end.

  Thanks,

  --
  j. eric townsend
  IT/Facilities Manager
  Icras, Inc.  (formerly DataRover Mobile Systems, Inc.)
  408.530.2916 / <http://www.icras.com>

  _______________________________________________
  firewall-wizards mailing list
  firewall-wizards () nfr com
  http://www.nfr.com/mailman/listinfo/firewall-wizards


Current thread: