Re: [Full-Disclosure] PIX vs CheckPoint

[Laurent LEVIER <llevier@xxxxxxxxxxxx>]

At 10:29 30/06/2004, Cyril Guibourg wrote:
> AFAIK, a PIX can operate without NAT. Did I miss something ?
Yes, NAT can be disabled on Pix.
See the 'nat' command.

Simply put the appropriate line syntax and it will behaves as a normal 
Firewall.
But only behaves because no routing daemon, and Pix keeps managing packets 
as a NAT box, he just does not change the source IP

Brgrds

Laurent LEVIER
Systems & Networks Security Expert, CISSP CISM

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html