The higher sec levels can communicate to lower sec levels using their untranslated addresses by doing something like the following: static (inside,dmz) 172.16.0.0 172.16.0.0 netmask 255.255.0.0 0 0 -mike On Tue, 20 Feb 2001, Joseph Bannon wrote: > How can you not use NAT on a PIX? Doesn't NAT have to be used to allow > higher security levels to lower levels? > > I just got a PIX for our network and it's really puzzling. I only have one > router. Do I need two? - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
- To NAT or not to NAT in the DMZ, that is the question. Jim Johnson
- RE: To NAT or not to NAT in the DMZ, that is the quest... Ben Nagy
- RE: To NAT or not to NAT in the DMZ, that is the q... Joseph Bannon
- RE: To NAT or not to NAT in the DMZ, that is t... Michael Nelson
- RE: To NAT or not to NAT in the DMZ, that ... Joseph Bannon
- RE: To NAT or not to NAT in the DMZ, ... Michael Nelson
- RE: To NAT or not to NAT in the D... Joseph Bannon
- RE: PIX Firewall (was: nat) Joseph Bannon
- RE: To NAT or not to NAT in the DMZ, that is the quest... Jim Johnson
- RE: To NAT or not to NAT in the DMZ, that is the quest... Ben Nagy
