Site to Site PIX VPN with remote client VPN

[n.oneill]

Hi

We have 3 sites connected together via a fully meshed site to site VPN using PIX firewalls. We are proposing to allow mobile users with the Cisco VPN client to connect to the head office. If we do this will they be able to talk to the other 2 sites as I understand a PIX will not send a packet out an interface it was received on?

[aacole]

You will have problems with this, as you say the PIX wont send packets back out of the interface they were received on.

You can set up the clients so they connect to each office, with multiple entries in the client connection manager.

Or if you only want one VPN access point you may need to consider a router or concentrator to terminate the client VPN's.