NEW implementation

[rangap26.]

Hi,

IAm very new to this security plat from in networking.

My seniors have assigned me a task.

Restructuring of the exsisting lan USINg PIX

Here are the tasks

1. Tosetup VPN

2. ISP failover

3.We have a Linux squid that is placed , but we want it to be replaced with cisco devices.

My doubt is is that is PIX capabale of doing ISP failover,

Natting,

I heard that squid can forward all the http traffic to server... is that possible...

Can any one expalin me abt this.

Thanks

Ranga

[zubairjalal]

Ranga.

You need to be more specific with your requirements. Do you want to setup a site to site vpn or remote access vpn. I dont think that the PIX can do ISP failover. You need a seperate device for that which does ISP load balancing.

[garyb]

The pix and ASA can do ISP failover

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a00806e880b.shtml

[zubairjalal]

good doc gary..thanks..i didnt know that it can do isp failover.

[andrew.burns]

Hi,

In addition to the other replies the pix (or asa) supports wccp for traffic re-direction to the squid box (Quote from squid docs - "7.2(1) has been tested and verified to work with Squid-2.6")

So, all your bases are covered..

HTH

Andrew.

[jchandra]

Hi Andrew,

currently we implement asa with wccp to a squid box. we are using asa o/s 7.2(2), squid 2.6STABLE4 with wccp module 1.7. But we have problem in certain URL, especially with large http body. Can you give us a hint about your testing ?

thanks in advance