VPN Client & Failover

[skiran]

Hi

I saw in my testing that whenever a failover occurs on a PIX we have to restart our VPN sessions inorder to connect to the inside network...But last week i met a NETSCREEN specialist he said that this is not in the case of NETSCREEN & its VPN client., they need not restart their VPN session...IS IT TRUE in case of PIX Firewall...Or am i goin wrong in configuring my VPN Client...though ther is an option of enable state full on the VPN client it does'nt seem to be working

Regards

Raj

[gfullage]

Can't speak for Netscreen, but the PIX does not currently have any IPSec stateful failover, so in the event of a failover you will have to restart your VPN connection. This feature has been discussed quite a lot and is on the future PIX roadmap, not sure what version it'll go into though.