Adding PIX 515E to an existing network

[farid8156]

We have small network and we want to add a firewall (PIX 515E). We don't want to change the hosts IP address. All of address are public IPs and can be accessed from outside. Is it possible?? and how can be done??

For the firewall, there are at least two interfaces, is it possible for the outside interface to be in the same network as the internal interface??

Thanks

[bphan]

Hi Fari:

It appears that what you're trying to do can be accomplished by implementing transparent (layer 2) firewalling which will be supported on PIX 7.0.

As planned, PIX 7.0 will be available at the end of this month.

Up until 6.3.4, you will have to assign 2 seperate subnet addresses to 2 interfaces of the PIX, configure NAT control and appropriate filtering rules to control traffic going through the PIX.

Hope that helps.

Best regards,

Binh