PIX 506E DMZ config

Hi out there

I'm a newbie on PIX configuration and would appreciate some hints on following issue.

I need to establish a DMZ, either using the VLAN feature in the PIX 506E, or cascading two 506E's in the below shown setup:

INTERNET --> PIX 506E --> DMZ NETWORK --> PIX 506E --> INTERNAL PRIVATE NETWORK

Is both scenario's possible and which is preferable ?

BTW: VPN must be able to function !

Best regards, /Anders Dahl Tollestru

Reply to
Anders Dahl Tollestrup
Loading thread data ...

I've set up a PIX506E with VLAN subinterfaces. It works well and will be simpler than using two PIXes. If you use two in the model you drew above, traffice from the internal net to the internet would have to pass through the DMZ, which could be a risk.

Reply to
Mark Williams

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.