Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Placement of Concentrator

Is it recommended to have the Concentrator behind a firewall, or can it just be placed in parallel (like the documentation suggests).

If behind say a PIX, what ports do i need open for this to work.

Ta.

2 REPLIES
New Member

Re: Placement of Concentrator

I'd suggest putting it in parallel with the PIX like the docs say. That's the way we do it!

New Member

Re: Placement of Concentrator

The most ideal design would be the Dual DMZ implementation design. Of course you need to have two interfaces on the firewall only for the concentrator - apart from internal, external and any other DMZ you might have.

Some of the benefits of this design woule be: Unauthorized attempts will be intercepted by the firewall and traffic destined for the concentrator will be logged by the firewall and firewall can protect the concentrator from DOS attacks.

Regards / Sampath of SAMW Inc.

SampathSR@samw.com

140
Views
0
Helpful
2
Replies