Cisco Pix 501, working around an ISA server.

ajones · ‎03-01-2007

I was wondering if I could ask you a question regarding the pix. We are looking into an alternative way of working around the isa server. We are looking into having a connection from the pix to the switch. Could we configure on the pix to connect directly to the switch only when it's a Cisco VPN client connecting? Also, if it's a "www client" the pix realizes this is an outside connection and redirects the connection to go through the ISA? Please see attachment for clarity.

Thanks for your help.

kaachary · ‎03-05-2007

No, this is not possible. PIX can not d distinguish between tunnel traffic(after decryption) and normal internet traffic for routing.

Moreover, TDG (Tunnel Default Gateway ) was introduced in PIX 7.x code. So, you can not use that. PIX will route tha traffic on the basis of information in routing table.

HTH,

-Kanishka