NAT-T verus IPSec/UDP versus IPSec/TCP

[jeff.roback]

I'm trying to determine how one selectes beteween the three nat transparency protocols (NAT-T, IPSec over UDP & IPsec over TCP). I understand that Pix 6.3 supports only the 1st two, and that the VPN 300x gear & the software client support all three.

Does anyone have any reccomendations on which to use? Are there differences in performance or compatability between the three?

I would think one would want to avoid NAT-T, simply because it's a fairly new feature and various bugs may pop up. However, I'm stuck between IPSec UDP & IPSec TCP on 300x concentrators. Any guidelines?

[afakhan]

hi,

as long as u can configure ipsec/tcp, you should use it (works better with NAT devices). NAT-T works fine, you can use it as well with pix.

Thx

Afaq

[awaheed]

Hi Jeff,

You can use either NAT Transparency methods as both work very well, it just depends on what suits you better.

Regards,

Aamir