The Contivity switches have a "branch tunnel" option.  We have a couple of Checkpoint fw's and a couple of Contivity switches, but we aren't tunnelling between them as such.  It sounds like you're looking at implementing site-to-site vpn tunnel, so the above option may work for you.  As far as I know, the Contivity units do standard IPsec/IKE, you will probably just need to experiment with them.
-----Original Message-----
From: Stuart Carrison [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, May 01, 2002 11:08 AM
To: [EMAIL PROTECTED]
Subject: [FW-1]

Hi there,

We're currently in the throws of implementing FW-1, however, our web site is hosted by our MSP and we wanted to set up a permanent VPN to them (firewall to firewall VPN).

Our MSP uses a Nortel 'hardware box' and we want to use FW-1 on an Intel server. Our MSP insists that FW-1 > Nortel VPNs won't work, even though I'm under the impression that nortel firewalls use FW-1!!

Can anyone verify this? If this is the case, can anyone suggest away of keeping our intel server and still creating a VPN with the MSP?

If this is proven TO WORK can someone send me some supporting docs?

Cheers,

Stuart C
Screwfix Direct

intY has scanned this email for all known viruses (www.inty.com)

Reply via email to