Remote site VPN question

[scottdware]

Hello,

I was wondering...if you were to have remote sites connecting back to your main headquarters via IPSec VPN tunnels. Would you have the IPSec tunnels terminate on the internet router before your firewall, or on the firewall (PIX) itself?

 

[doug04]

The tunnels must get by your firewall first in order to work. Some use thier VPN router as the firewall itself so they just forward the correct ports needed. It all depends on what you use as a firewall.

 

[alfa156]

Doug is correct It must reach your firewall first. In your case you would want your VPN tunnel to terminate at the PIX.