Full Disclosure mailing list archives

Re: PIX vs CheckPoint


From: Laurent LEVIER <llevier () argosnet com>
Date: Wed, 30 Jun 2004 20:23:23 +0200

At 10:29 30/06/2004, Cyril Guibourg wrote:
AFAIK, a PIX can operate without NAT. Did I miss something ?
Yes, NAT can be disabled on Pix.
See the 'nat' command.

Simply put the appropriate line syntax and it will behaves as a normal Firewall. But only behaves because no routing daemon, and Pix keeps managing packets as a NAT box, he just does not change the source IP

Brgrds

Laurent LEVIER
Systems & Networks Security Expert, CISSP CISM

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: