Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
250
Views
0
Helpful
1
Replies

VPN on router or PIX. Which is better?

young.chris
Level 1
Level 1

‎10-28-2002 12:50 PM - edited ‎02-21-2020 12:08 PM

I have not been able to find any concrete information regarding running VPN on a PIX firewall or 2620 router as to which one would perform better for VPN. We have a PIX 520 firewall and a Cisco 2620 router (neither one has the hardware acceleration card). Which one would be better for running site to site VPN? We will most likely only have around 10-20 site to site tunnels. Also, we are wondering if it would be better to terminate the VPN tunnel inside the PIX so that the unencrypted packets could then get inspected by the PIX? Or is it better to pass the encrypted traffic through the PIX and terminate the tunnel on the other side (the inside) on the 2620 router? Thanks for your help,

Chris

Labels:
0 Helpful
1 Reply 1

edadios
Cisco Employee
Cisco Employee

‎10-28-2002 05:55 PM

If you are doing lan to lan hub and spoke, and intend for the spokes to communicate to one another as well, you need to use the router for vpn. The pix does not do redirect.

Putting the pix in from of the router is also good for security.

Regards,

0 Helpful
Customers Also Viewed These Support Documents