When you say "transparent" firewalling, this could mean different
things. If you need to insert a firewall device without replacing any
exisiting device (e.g. a router) and want to make absolutely NO
network-layer (IP layer) changes, no renumbering OR resubnetting, then
you're asking whether the PIX can do "transparent bridging". The answer
is no.
If you're just swapping out a router and putting a PIX in its place, and
want to know if you can avoid NAT, then yes, you can avoid doing NAT and
just use existing IP addresses on the systems.
Email me if you have further questions.
Michael
Chad Markley wrote:
>
> I have a customer that I need to install a Pix firewall for. However, they
> are currently running public IP addresses and don't want to change them to
> private and utilize NAT and NAPT.
>
> Is the Pix capable of transparent firewalling? I want to put it in front of
> their servers and run transparently.
>
> I have searched the TAC for information relative to transparent and firewall
> as keywords to no avail.
>
> Any ideas?
>
> -
> [To unsubscribe, send mail to [EMAIL PROTECTED] with
> "unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
