IPSEC VPN : PIX501 to a Netscreen

[scotthale]

Has anyone worked (broadly) with this combo in site-2-site configurations?

I have 15 PIX 501's to deploy at branch offices, and a NS-100 as the HQ head-end terminiating endpoint.

Any input on problems or issues you experienced getting the devies to interop would be most appreciated.

Regards,

Scott Hale

[gfullage]

I've had customers do this, the config on the PIX is standard, just make sure your Phase 1 and Phase 2 timers match, and of course your crypto ACL's (or whatever they call them on the Netscreen) are exactly the opposite of each other.