IPSEC out the same interface?

[mike.butorac]

Hi,

I need to setup a path from a Check Point to a PIX 506 to a Cisco SOHO91 (12.3(8)). I do not want to go direct from the Check Point to the SOHO because there are many more sites that will need the same solution.

Anyway, the basic question is this: The IPSec traffic for the SOHO coming from the Check Point will enter and leave the PIX through the same interface. It's not working now, and I am wondering if it is even possible to do what I am trying? I recall that some firewalls will not pass traffic out the same interface the traffic arrived on.

Thanks,

Mike

[pmajumder]

Hello,

Only Pix code 7.x, and above will allow traffic to enter and leave through the same interface (known as IPSec Hairpinning). Unfortunately the PIX 506 will not support 7.x code.

Regards

Pradeep

[mike.butorac]

Thanks!!