Re: [fw-wiz] Benefits of Network Extention Mode vs IPsec

["Robby Cauwerts" <robby@cauwerts.be>]

On 1/18/07, Craig Van Tassle <craig@codestorm.org> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I suppose you're talking about Cisco vpn stuff.

Can anyone point me to some good documentaion as why NEM is better then Standard
IPSec VPNS?

Basically: two two sides can initiate traffic.

With Client mode (to which you are referring as *standard* IPSec) only the client can setup traffic to the main office because PAT is used.

When using NEM your main office can also setup traffic to the remote vpn site because no PAT is used but routable addresses.

For configuration guides and in depth explanation check the Cisco site.

Br.
Robby

_______________________________________________
firewall-wizards mailing list
firewall-wizards@listserv.icsalabs.com
https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards