PIX 506E DMZ config

May 01, 2006 1 Replies

Rate this thread:

Anders Dahl Tollestrup 20 years ago

Hi out there

I'm a newbie on PIX configuration and would appreciate some hints on following issue.

I need to establish a DMZ, either using the VLAN feature in the PIX 506E, or cascading two 506E's in the below shown setup:

INTERNET --> PIX 506E --> DMZ NETWORK --> PIX 506E --> INTERNAL PRIVATE NETWORK

Is both scenario's possible and which is preferable ?

BTW: VPN must be able to function !

Best regards, /Anders Dahl Tollestru

Vote

Mark Williams 20 years ago

I've set up a PIX506E with VLAN subinterfaces. It works well and will be simpler than using two PIXes. If you use two in the model you drew above, traffice from the internal net to the internet would have to pass through the DMZ, which could be a risk.

Vote

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required