Join to DC from outside pix

[Guest]

The situation is this:
We have a private and very important internal network inside an another
private and very large intranet.
Between this network there is a pix Firewall.
Both network have private ip address
Inside PIX 192.168.x.x
Outside PIX 10.x.x.x
The our necessity is that from network 10.0.0.0 place outside PIX, many WKS
(2000 professional) must to join to DC that are inside to PIX.
No access is request from internet but only from intranet.
The problem is DNS on DC that have SRV record with association 192.168.0.0
that are unreachable from intranet why pix done a Nat.
We would like avoid to use Ipsec and VPN from intranet station.

Thanks

 

[Lanwench [MVP - Exchange]]

The situation is this:
We have a private and very important internal network inside an
another private and very large intranet.
Between this network there is a pix Firewall.
Both network have private ip address
Inside PIX 192.168.x.x
Outside PIX 10.x.x.x
The our necessity is that from network 10.0.0.0 place outside PIX,
many WKS (2000 professional) must to join to DC that are inside to
PIX.
No access is request from internet but only from intranet.
The problem is DNS on DC that have SRV record with association
192.168.0.0 that are unreachable from intranet why pix done a Nat.
We would like avoid to use Ipsec and VPN from intranet station.

Thanks

See replies to your other posts (to wit: do not poke too many holes in your
firewall or you might as well just throw it out the door entirely - use
VPN).
Please don't multipost - if you need to post to multiple groups, it's best
to crosspost instead, by posting a single message to a handful of relevant
groups (separate the NG names with commas) so that everyone can follow the
thread. This makes it easier for everyone, including you.