topic Re: Pix transparent and router mode which to choose in Network Security https://community.cisco.com/t5/network-security/pix-transparent-and-router-mode-which-to-choose/m-p/395834#M552595 <HTML><HEAD></HEAD><BODY><P>In transparent mode, the firewall is like a firewall on a wire. The IP subnet on the outside and the inside is the same. It's not a routed hop. No ttl--. You can't NAT. Hence your inside/outside networks won't use the firewall as a next-hop. I think you can't even run OSPF. You still can apply policies based on TCP/IP etc. This option is best suited for networks that are already designed and in production.</P><P></P><P>Routed mode gives you all of the above.</P><P></P><P>Hope this helps.</P></BODY></HTML> Wed, 19 Jan 2005 16:08:18 GMT rais 2005-01-19T16:08:18Z Pix transparent and router mode which to choose https://community.cisco.com/t5/network-security/pix-transparent-and-router-mode-which-to-choose/m-p/395833#M552594 <P>HI,</P><P></P><P>i'm new to firewall and i would like to implement the pix firewall module, One of my question is which mode should i choose, transparent or routed, Did all both mode provide the same level of security, which is more secure and why? if you have link to more adavnced doc please send it to me. i read the firewal l mode section in the fwsm configuration doc but this doesn't tell too much.</P><P></P><P>Thanks </P><P></P><P>ralph</P> Fri, 21 Feb 2020 07:52:38 GMT https://community.cisco.com/t5/network-security/pix-transparent-and-router-mode-which-to-choose/m-p/395833#M552594 raould.traore 2020-02-21T07:52:38Z Re: Pix transparent and router mode which to choose https://community.cisco.com/t5/network-security/pix-transparent-and-router-mode-which-to-choose/m-p/395834#M552595 <HTML><HEAD></HEAD><BODY><P>In transparent mode, the firewall is like a firewall on a wire. The IP subnet on the outside and the inside is the same. It's not a routed hop. No ttl--. You can't NAT. Hence your inside/outside networks won't use the firewall as a next-hop. I think you can't even run OSPF. You still can apply policies based on TCP/IP etc. This option is best suited for networks that are already designed and in production.</P><P></P><P>Routed mode gives you all of the above.</P><P></P><P>Hope this helps.</P></BODY></HTML> Wed, 19 Jan 2005 16:08:18 GMT https://community.cisco.com/t5/network-security/pix-transparent-and-router-mode-which-to-choose/m-p/395834#M552595 rais 2005-01-19T16:08:18Z