Routed IP behind PIX

Posted on 2011-04-28
Last Modified: 2012-08-14
we have pool of routed IPs (public) from the day the internet came, most of our server and PC are with public IPs.
we have a firewall and have access-list to deny all ports  and allow the prots which we want.
is it something wrong to have public IP eventhough we have firewall?
 An  IT guy came on board and  started to talk all gig talk.
my argument was that we have forewall and blocking the ports why do we hav eto have NAted IP?
i would appreciate your expert comments and advice.
Question by:pdsmicro
    LVL 35

    Accepted Solution

    If you have enough public ip's it isn't really a problem, but (there's allways a but :)

    Using private ip's on your local network and natting them to a public address adds an extra layer of security to the network. If it was only for the simple fact that private ip's cannot be routed over the internet. One configuration fault or a glitch/bug in the firewall and your completely open to the internet. Whilst with NAT you still have a basic 'protection' left.

    So personally I don't see it as an issue, as long as it's very well administered.

    Author Closing Comment


    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    Join & Write a Comment

    How to configure Site to Site VPN on a Cisco ASA.     (version: 1.1 - updated August 6, 2009) Index          [Preface]   1.    [Introduction]   2.    [The situation]   3.    [Getting started]   4.    [Interesting traffic]   5.    [NAT0]   6.…
    This article assumes you have at least one Cisco ASA or PIX configured with working internet and a non-dynamic, public, address on the outside interface. If you need instructions on how to enable your device for internet, or basic configuration info…
    Need more eyes on your posted question? Go ahead and follow the quick steps in this video to learn how to Request Attention to your question. *Log into your Experts Exchange account *Find the question you want to Request Attention for *Go to the e…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    21 Experts available now in Live!

    Get 1:1 Help Now