AFAIK, a PIX can operate without NAT. Did I miss something ?
Yes, NAT can be disabled on Pix. See the 'nat' command.
Simply put the appropriate line syntax and it will behaves as a normal Firewall.
But only behaves because no routing daemon, and Pix keeps managing packets as a NAT box, he just does not change the source IP
Brgrds
Laurent LEVIER Systems & Networks Security Expert, CISSP CISM
_______________________________________________ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html