«

Hi to everyone
i have installed a vpn fully mesh with Pix's beetwen my three country

Everytime I browse my network with Windows
I see the resource of the other country.
My Supervisor don't want this situation.
it's possibile to eliminate this?

Best Regards

In article <gblmc.170736$>,
Martin Eden <> wrote:
:i have installed a vpn fully mesh with Pix's beetwen my three country

:Everytime I browse my network with Windows
:I see the resource of the other country.
:My Supervisor don't want this situation.
:it's possibile to eliminate this?

You probably have sysopt connect permit-ipsec
Turn that off, and put in ACL's that only permit the traffic that
is acceptable under your supervisor's security policy. Traffic
over VPNs is examined by the ACL of the interface the traffic enters the
pix on, unless you have sysopt connect permit-ipsec turned on.
--
"Infinity is like a stuffed walrus I can hold in the palm of my hand.
Don't do anything with infinity you wouldn't do with a stuffed walrus."
-- Dr. Fletcher, Va. Polytechnic Inst. and St. Univ.