Mike H Posted June 2, 2005 Posted June 2, 2005 I need a VPN/firewall that will hide IP addresses at layer 7 in order for us to connect via VPN to one of our clients. Reason: Our current firewall/vpn device does NAT but nothing at layer 7 which means we get an IP address conflict on certain applications. The workaround has been to setup a routing table and temporarily change the IP address of the PC we are using to VPN - which is a real PITA! Does anyone know if the Pix 515E-R will solve our problem? Do all Pix firewall/vpn devices do this? Is there any other software I would need? This will also double as a 'work from home' VPN setup. thanks in advance Mike Quote
mr-rad Posted June 2, 2005 Posted June 2, 2005 Not sure if i'm completely correct but as i understand it...... NAT is software driven and as such is layer 7. Apparently if anything will do what you want it to do a Cisco Pix box is the jobbie. Note to self..... Do Cisco training, it's got to be more use than Microsoft Certs. Quote
steve_m Posted June 2, 2005 Posted June 2, 2005 Talk to Adrian at GGR (01905 825 900), he will know exactly what you need to do. Quote
Mike H Posted June 2, 2005 Author Posted June 2, 2005 Cheers guys I might just give Adrian a call. Cisco training - I'm too busy working! Quote
itguy Posted June 2, 2005 Posted June 2, 2005 I think you need to be looking at the 'IP NAT Traversal' features... Bin a while tho so could be talking Quote
geofff Posted June 2, 2005 Posted June 2, 2005 Hi Mike H, I just emailed your post to our CCIE. I'll pass on any comments. Ta Geoff Quote
NEW SS1 Posted June 2, 2005 Posted June 2, 2005 Have you looked at a Watchguard Fiebox Soho 6TC? more info at www.watchguard.com we have them here and they seem to do it all..... most of which is miles over my head anyway! Dan Quote
Mark Stanton Posted June 2, 2005 Posted June 2, 2005 Note to self..... Do Cisco training, it's got to be more use than Microsoft Certs. Call GGR Communications (and Club Sponsors) Quote
geofff Posted June 3, 2005 Posted June 3, 2005 Hi Mike H, The CCNA/P emailed me this (And I confirmed it with his boss the CCIE), not that I have a clue what it means: "Yes, PIX-515E-R provides rich Layer 2-7 firewall security services for the protected network while remaining "invisible" to devices on each side of it." Apparently they're going to send me the data sheet on it Huh? Do you want that? Ta Geoff Quote
geofff Posted June 3, 2005 Posted June 3, 2005 Hi, And I thought accountancy was boring I just asked the config supervisor what the difference was between: PIX-515E-R-BUN, PIX-515E-R-DMZ-BUN, PIX-515E-UR-BUN & a PIX-515E-UR-FE-BUN Oh what a laugh I had He started to tell me about the PIX-525 & 535 range before I ran away screaming........ Ta Geoff Quote
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.