PPTP within IPSEC??

[soneji]

I have a question about a VPN tunnel within another VPN tunnel. Is it possible to establish a PPTP tunnel to an ISA server through an established IPSEC tunnel that is terminated at a PIX.

Here is a diagram:

Some general info is that my customer wants multilayered security, hence dual tunnels.

If it isn't possible do you have any suggestions?

Thanks in advance

 

[gacollier]

soneji,

I'm able to run a PPTP session through an IPSec tunnel to a Linksys RV082 and a ZyWall 10 II so I'm guessing the PIX should work. Have you tried it?

 

[chicocouk]

Why bother? Unless someone's sniffing the traffic between the pix and the isa server, you don't get any benefit that I can think of ... IpSec is already stronger encryption than PPTP, and you'll impact your available bandwidth if it works at all. My gut feeling is that the pptp and ipsec clients will get in each other's way, but i've never tried it

CCNA, MCSE, Cisco Firewall specialist, VPN specialist, wannabe CCSP