vpn and pix security command

[lawanj]

I set up a vpn on the dmz. It is working perfectly now. I need to add extra security commands, if any on the pix for this vpn link so to protect against the vpn device itself and my internal network. Need suggestions, Thank you.

[thomas.chen]

If I understand correctly, you have some VPN device hanging off the DMZ interface of the PIX (a third interface). Your tunnels terminate through the PIX outside interface to this device and then have access to resources on the DMZ. If that scenario is correct, the DMZ is isolated and should not have access by default to the inside network so you shouldn’t have to add anymore commands to the PIX to protect your inside network.

Hope this helps!