PIX and Policy based routing

[alan-white]

Can the PIX box differentiate traffic between inbound and outbound on each individual interface? I need to separate inbound and outbound traffic on different interfaces in order to do policy based routing on some of my routers.

[thomas.chen]

I don’t think you can do this because of the stateful packet filtering that the firewall performs. Can you provide details and example of what you are attempting to do?

[jfirrinc]

The PIX is unable to do this task, since it only has one default gateway to point to. If you had that situation then your connections would not be stateful anymore longer, which is not a good thing.

If an inbound packet would enter the pix through a static and the host replies the PIX will shoot it out only one route out, to its default gateway. THE PIX IS NOT A ROUTER.