Hot Downloads



The forum is in read only mode.
Welcome, Guest
Username: Password: Remember me
  • Page:
  • 1

TOPIC: firewall placement

firewall placement 5 years 2 months ago #38455

  • skylimit
  • skylimit's Avatar Topic Author
  • Offline
  • Distinguished Member
  • Distinguished Member
  • Posts: 158
  • Thank you received: 1
Hi all, I've been doing a bit of study on firewalls lately (normally spend most time on routers & switches) and one of the things I'm yet grasp, is placement of a firewall on a network, by design if you link.

For instance, if you have a network based on the Cisco hierarchical model i.e. core, distribution, and access layers, where would you place the firewall?

Here's my understanding.

Access layer (L2 switches) - workstations, servers, etc..pretty simply

Distribution layer (L3 switches) - SVIs for intervlan routing, etc

Core layer (L3 switches) - connection to upstream service provider router, BGP, etc

Would it be possible to place the firewall in front of the core routers even when it doesn't 'quite' do stuff link BGP routing for instance or behind it? what is the most basic placement in such a hierarchical network? I've seen a lot of diagrams onthe web but they don't really show the firewalls

access<---->dist<--->core<--->asa firewall<---> internet/service provider

I don't know if my question makes sense

Any input, notes, links, etc from people experienced in this area will really help me

" are never too old to learn" anon
  • Page:
  • 1
Time to create page: 0.090 seconds


Cisco Routers

  • SSL WebVPN
  • Securing Routers
  • Policy Based Routing
  • Router on-a-Stick

VPN Security

  • Understand DMVPN
  • GRE/IPSec Configuration
  • Site-to-Site IPSec VPN
  • IPSec Modes

Cisco Help

  • VPN Client Windows 8
  • VPN Client Windows 7
  • CCP Display Problem
  • Cisco Support App.

Windows 2012

  • New Features
  • Licensing
  • Hyper-V / VDI
  • Install Hyper-V


  • File Permissions
  • Webmin
  • Groups - Users
  • Samba Setup