network design, need feedback...

By techrepublic ·
Hey people, need some feedback on network design. See the pic below.

Basically im in a debate as to whether i should put the firewall before the router or after it (like in the pic). I put the 1800 there to take the load of packet switching and multihoming off the firewall. keep in mind the 1800 is a firewall aswell but would just be firewalling the dmz (which is also debatable) and pretty much passing everything else down to the ASA.

I *believe* the design in the pic is what cisco recommends but there may be some natting issues to do with the multiple internet connections?

any thoughts appreciated. thanks in advance!

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -

Need Help

by kirupashankar39 In reply to network design, need feed ...

Hi, I saw your network diagram and understood that you have configured two ISP's in the router. Even i am engaged in the same situation. Can you please share the configuration part of the router. Did u use router on a stick concept. If yes please share the config part, which will be very useful for me. Thanks in advance

Collapse -

Your router should have a firewall built in..

So having a firewall after makes sense. Though little configuration might be needed for the data to pass the two firewalls in question.
More info here:

Please post back if you have any more problems or questions.

Related Discussions

Related Forums