Re: Benefits of Network Extention Mode vs IPsec

["Robby Cauwerts" <robby () cauwerts be>]

On 1/18/07, Craig Van Tassle <craig () codestorm org> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1


I suppose you're talking about Cisco vpn stuff.

Can anyone point me to some good documentaion as why NEM is better then
> Standard
> IPSec VPNS?


Basically: two two sides can initiate traffic.

With Client mode (to which you are referring as *standard* IPSec) only the
client can setup traffic to the main office because PAT is used.

When using NEM your main office can also setup traffic to the remote vpn
site because no PAT is used but routable addresses.

For configuration guides and in depth explanation check the Cisco site.

Br.
Robby

_______________________________________________
firewall-wizards mailing list
firewall-wizards () listserv icsalabs com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards