Non PIX F/w to PIX VPN

[paulmcdonald]

Hello to all,

I have a site that want's to establish a VPN to our PIX from a non PIX firewall, whilst maintaining internet connectivity through their own ISP.

How much of a security risk does this pose to our network? We have no control over the remote firewall or network.

[mklaphek]

It really comes down to a business decision. If you need connectivity between the sites, then do it, but lick it down to only what you need and monitor the connection closely. I know this isn't that answer you want, but I don't know of a way to quantify the risk.