PIX and GRE Tunnels

[Mel Popple]

Is it possible to terminate GRE tunnels on to a PIX firewall?

It needs to be GRE tunnel and not any other type of VPN tunnel.

Thanks

[kaachary]

PIX firewall does not support termination of GRE tunnels. Can act as GRE passthrough though.

-Kanishka

[Mel Popple]

Sadly it's the data inside the GRE tunnels that we need to inspect. This could be most things but will definitely include multicast traffic (hence the need for GRE to get through the initial cloud).

Are Pix firewalls capable of examining the types of data inside a GRE packet as they would a normal packet?

Mel

[kaachary]

Doesn't look like there's an inspect rule for GRE.

http://www.cisco.com/en/US/customer/products/ps6120/products_command_reference_chapter09186a008063f0e8.html#wp1666537

-Kanishka