Welcome to ISAserver.org

Cisco VPN client w Back to Back Firewalls

Users viewing this topic: none

Logged in as: Guest

Printable Version

All Forums >> [ISA Server 2004 Firewall] >> VPN >> Cisco VPN client w Back to Back Firewalls

Page: [1]

Message

<< Older Topic Newer Topic >>

Cisco VPN client w Back to Back Firewalls - 21.Jul.2004 7:59:00 AM

grantos

Posts: 4
Joined: 21.Jul.2004
Status: offline

I will be implementing back-to-back firewalls as follows and am unable to move the clients from the Cisco VPN client. Is there a way to pass thru the authenticated (Shared secrect and Radius for auth.) VPN client to the internal network?

VPN Client-WEB-PIX(VPN Endpoint)-ISA2004-LAN

Regards,

Grant

Post #: 1

Featured Links*

RE: Cisco VPN client w Back to Back Firewalls - 21.Jul.2004 3:31:00 PM

tshinder

Posts: 47663
Joined: 10.Jan.2001
From: Texas
Status: offline

Hi Grant,

You can do that, but why would you terminate a VPN connection in a DMZ? That seems very dangerous to me!

How about using a more secure VPN client? The MS VPN client is more secure *and* more stable. Then you can terminate the VPN connection at the ISA firewall.

The PIX can remain there and do the packet filtering for the DMZ, while the ISA firewall does the VPN termination and the real firewall protection.

HTH,
Tom

(in reply to grantos)