IPSec over TCP on PIX FW??

[samuel.suen]

Hi all,

Will Cisco plan to implement IPSec over TCP on PIX FW, like VPN 3015 concentrator??

The reason is some firewall/NAT boxes cannot handle "IPSec passthrough". Thus Cisco VPN client, which is behind the boxes, cannot establish the VPN tunnel to the remote PIX FW.

Thanks !

[mostiguy]

PIX supports the draft standard NAT-T which uses UDP. I think this feature arrived in the 6.3 pix os train