IPSec Terminating on PIX - How to filter IP traffic after VPN termination?

[davelockerby]

Can IP traffic be filtered on the same PIX firewall where the IPSec VPN tunnel is terminated? Or does the filtering have to take place on an external source such as a router of additional PIX?

Posting of links to documentation/examples or basic configs is greatly appreciated!

-Thanks

[afakhan]

Hi,

You can use filtering (ACL on the inside interface) of the PIX fw to filter unwanted traffic from going down the tunnel, another approach to "deny" specific traffic flows in the crypto ACL.

Thanks,

Afaq