Placement of PIX and CSS

[ct_yau]

Hello,

Suppose I have a pair of PIX, a pair of CSS and a server farm. What should be the placement from the outside to inside? PIX-CSS-servers or CSS-PIX-servers? What are the considerations?

Of course, by using a pair of PIX and a pair of CSS I want to achieve to have no single point of failure.

Moreover,is NAT in PIX meaningful in this case as CSS is already doing some kind of NAT?

CT Yau

Hong Kong

[seilsz]

Most designs place the PIX in front of the CSS. I would recommend you reference the various Data Center SRND's for potential design variations. You can find them here:

http://www.cisco.com/warp/public/779/largeent/it/ese/srnd.html

~Zach