The location will primarily be pushing IPSec traffic over the link, so maintaining packet order is the critical issue.The options I've looked at thus far are CEF/pp, MLPPP (and FR), BGP, and an inverse mux.Thanks in advance.
I've got a PIX 515 with about 10 different EasyVPN users defined via the vpngroup command. Is there any way to see which of these users are logged in at a given time? Another way of asking this...is there any way to see which vpngroup is active at a ...
I'm pretty sure you cant forward Websense lookups from a remote PIX over a VPN tunnel to a websense server at the Corp HQ. Is that correct?Is this a feature we're going to see in the 7.0 OS?Given the nature of the Websense licensing (they dont care h...
I'm pretty sure there is no way to forward Websense lookups over a VPN tunnel from a remote office using a 501 to a central Websense server at the Corp HQ. Is this feature going to be added in PIX 7.0?
I've got some questions concerning T3 technology that I haven't been able to find a clear answer about anywhere.1) What is the difference between Clear Channel and Channelized? I've heard that Clear Channel (B8ZS? I know what this, is Clear Channel t...
This is probably a question better suited to ask Websense directly or to look up in their FAQ. But I'll try to answer it here, but for more info I'd look to Websense since this isn't a direct issue with the PIX unless your users are not getting filte...
Are these remote sites?Just thinking out of the box here....If they are remote sites, couldn't you just write an ACL to deny one network access to the websense server you dont want it to hit, and just set your websense timeouts real low in the PIX?Ex...
Brian,To follow up your second question.In regards to tcp traffic being what initiates the tunnel from site A to site B, TCP traffic will not be the only thing allowed over that particular tunnel. Since you have also allowed UDP traffic via the same ...
IPSec should not cause any line errors on the frame-relay link. Carriers saying there is "no problem" is pretty common, and is a way for them to get out of having to really test the line hard.If you're getting errors on those links, you need to do a ...
