If you're using a PIX you'll find it MUCH easier to configure if you use
NAT.
This is not a security argument, however.
(although personally I think that NAT always adds _some_ level of security)
Cheers,
--
Ben Nagy
Network Consultant, Volante IT
PGP Key ID: 0x1A86E304 Mobile: +61 414 411 520
> -----Original Message-----
> From: Oscar Rau [mailto:[EMAIL PROTECTED]]
> Sent: Wednesday, 26 July 2000 10:46 AM
> To: [EMAIL PROTECTED]
> Subject: PIX and NAT
>
>
> We are implementing a DMZ which will be using public IP addresses. The
> DMZ systems interfacing the PIX interface will have a public IP
> addresses and not a private IP addresses. In this case, can GLOBAL/NAT
> statements be still used to add any valuable security to the DMZ
> systems? Is there any point in using NAT, because we do not
> have private
> IP addresses to the DMZ systems?
>
> Any thoughts/ideas for this solution appreciated.
>
> Thank you in advance.
>
> Oscar Rau
> [EMAIL PROTECTED]
>
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
>
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
