<div>
Is there a particular reason you're using GRE?<br />
<br />
You should just have to configure IPSec.
</div>


Is there a particular reason you're using GRE?

You should just have to configure IPSec.

<div>
I was configured that way before I took over the devices. It has static routes configured on the router
</div>


I was configured that way before I took over the devices. It has static routes configured on the router

<div>
Ah, okay. &nbsp;Well, if you're not intimately familiar with the router config, then you won't want to mess with it.<br />
<br />
Are you trying to configure a new VPN tunnel, or just looking at the existing config?
</div>


Ah, okay.  Well, if you're not intimately familiar with the router config, then you won't want to mess with it.

Are you trying to configure a new VPN tunnel, or just looking at the existing config?

<div>
<div class="content wysiwyg-content">
I have an ASA connected to a Cisco router and it has IPSec configure in it. I see from the router side, it is GRE over IPSec configuration. How about the ASA side, it should be GRE over IPSec as well and not VTI. Correct? Thx
</div>
</div>


I have an ASA connected to a Cisco router and it has IPSec configure in it. I see from the router side, it is GRE over IPSec configuration. How about the ASA side, it should be GRE over IPSec as well and not VTI. Correct? Thx

ASA site-to-site vpn

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

Cisco PIX is a dedicated hardware firewall appliance; the Cisco Adaptive Security Appliance (ASA) is a firewall and anti-malware security appliance that provides unified threat management and protection the PIX does not. Other Cisco devices and systems include routers, switches, storage networking, wireless and the software and hardware for PIX Firewall Manager (PFM), PIX Device Manager (PDM) and Adaptive Security Device Manager (ASDM).

Cisco

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.