Security considerations Rewriter or PTP

[ITdept_]

Hi,

I was wondering if someone could explain me the security implications of choosing PTP over using the rewriter for a web application. I know that Juniper recommends using the rewriter, but if there are functional limitations to the applications when using the rewriter pass-through-proxy is recommended. I'd like to know what additional security risks may be involved when choosing one over the other (if any).

Kind regards,

JH

[SVK_]

Hi JH,

irrespective of the access mechanism, Rewriter or PTP the trafiic will flow through the SA, Just that for PTP additional configuration would be required like registering a hostname or allowing one of the port in the range 11000 - 11099.

Regards,

SVK