Monitoring remote Pix over IPSEC site to site VPN

[mark.blanchfield]

I have a few Pix 501s that connect over site to site VPNs. We use Orion NPM and I cannot add them for monitoring. I have been able to add remote routers that connect via site to site VPNs. I am assuming the security rules/NAT of the Pix are preventing this. The configuration of the remote Pix is attached.

[acomiskey]

Good deal. Just click rate this post and click the box for this resolved by issue.

[mark.blanchfield]

When I added the static route to the 7606, it came up via SNMP but I could no longer SSH to the outside interface of the Pix.

[acomiskey]

You may want to do policy routing to send only the snmp traffic from your snmp box to the outside interface. All other source addresses could take the other path.