Query on enabling Socks services on PIX525-VPN (ver. 6.3)

[GOPAL <gpandit () kfupm edu sa>]

Hi folks,

I have query on replacing my MS ISA socks service by PIX fw.
 
Ext. VPN users------(socks)---> PIX <------(socks)-----Int. Users

My Expected Setup: 
1.socks based applications will tunnel with PIX external firewall for
Internal & dialin RAS users.
2. For external VPN users what's your suggestion? Will it be a IPSec
tunnel + Socks application tunnel? Can I open exclusive Socks tunnel on
External interface to check type of packets by (SNORT) IDS sensor? On
which PIX interface, I have to terminate the tunnel?

Excuse Me, if this query appears to be unclear
Thx,
G.

_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards