Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

GSS Behind firewall

I am looking to deploy GSS devices at two different locations. While reading the GSS configuration guide I noticed that deployment behind NAT devices is not supported. Quote 'The GSS does not support deployment of devices behind a NAT for inter-GSS communication. The communication between GSSs cannont inlcude an intermediate device behind a NAT because the actual IP address of the devices is ebedded in the payload of the packets.' Since our PIX firewalls perform NAT, I am assuming the GSSs have to be outside the firewalls. Is this a correct assumption? What is the recommended deployment strategy for this product?

  • Application Networking
1 ACCEPTED SOLUTION

Accepted Solutions
Cisco Employee

Re: GSS Behind firewall

you could still place the GSS behind the firewall but inside a DMZ where you don't perform any natting.

Like this, you still have the protection from the firewall.

Gilles.

1 REPLY
Cisco Employee

Re: GSS Behind firewall

you could still place the GSS behind the firewall but inside a DMZ where you don't perform any natting.

Like this, you still have the protection from the firewall.

Gilles.

192
Views
0
Helpful
1
Replies
This widget could not be displayed.