troubleshooting Question

Routing into a VPN endpoint and back out another firewall

Avatar of sloth10k
sloth10k asked on
Networking Hardware-OtherNetwork Architecture
1 Comment1 Solution486 ViewsLast Modified:
I have a number of remote users VPNing into our internal network through a Cisco PIX endpoint.  Currently, their web traffic is directed through their remote user VPN tunnel to a proxy server.  For example, their browser points to the proxy server, and the proxy communicates out.

I would like to change this configuration so that web traffic goes out another firewall that does not function as a proxy.  This firewall will be used for logging and filtering, so I do not want to use split tunneling to allow remote users to directly access the internet, and I would prefer that web traffic not go right back out the PIX.

I'm running into a routing problem on the PIX.  The PIX's default route is on its outside interface, so that it can communicate with any remote user.  It has static routes defined on its inside interface to access internal network resources, including the proxy server mentioned above.  However, when web traffic (with random IPs) is sent from a remote user down their VPN tunnel, there is no internal route on the PIX directing this traffic to the new firewall.

If I could define a different default gateway for remote user VPN tunnels, that might do the trick.  Forgive me if I'm missing something obvious...

Our community of experts have been thoroughly vetted for their expertise and industry experience.

Join our community to see this answer!
Unlock 1 Answer and 1 Comment.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 1 Comment.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros