topic FWSM configuration in Network Security https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705955#M1034576 <P>Hi,</P><P></P><P>I'm linking my network core to a government agency. They are a bit paranoid and their cisco sale eng. sold them this concept. </P><P></P><P>His it even possible(I know it's ugly!). How is it possible ? The sale engineer told them it would all work in transparent mode! </P> Mon, 11 Mar 2019 09:34:25 GMT dominic.caron 2019-03-11T09:34:25Z FWSM configuration https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705955#M1034576 <P>Hi,</P><P></P><P>I'm linking my network core to a government agency. They are a bit paranoid and their cisco sale eng. sold them this concept. </P><P></P><P>His it even possible(I know it's ugly!). How is it possible ? The sale engineer told them it would all work in transparent mode! </P> Mon, 11 Mar 2019 09:34:25 GMT https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705955#M1034576 dominic.caron 2019-03-11T09:34:25Z Re: FWSM configuration https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705956#M1034588 <HTML><HEAD></HEAD><BODY><P>heres the network diagram</P><P></P><P> </P><P></P></BODY></HTML> Fri, 16 Feb 2007 14:39:54 GMT https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705956#M1034588 dominic.caron 2007-02-16T14:39:54Z Re: FWSM configuration https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705957#M1034600 <HTML><HEAD></HEAD><BODY><P>Hi dominic</P><P></P><P>Doing this from memory as i don't have visio on this laptop but i did look at it earlier. </P><P></P><P>Without knowing the full requirements or reasoning behind the design it's difficult to comment too much. But one thing that does stand out is that you cannot chain security contexts and from memory that's what the diagram shows. From the 3.1 FWSM config doc: </P><P></P><P>==============================================</P><P>Note The FWSM does not support sharing the outside interface of one context with the inside interface of another context (known as cascading contexts). Traffic that is outbound from one context(from a higher to a lower security interface) can only enter another context as inbound traffic (lower to higher security); it cannot be outbound for both contexts, or inbound for both contexts. </P><P>==============================================</P><P></P><P>Are you going to accessing servers from all the contexts in the diagram ? </P><P></P><P>Jon </P></BODY></HTML> Fri, 16 Feb 2007 16:48:03 GMT https://community.cisco.com/t5/network-security/fwsm-configuration/m-p/705957#M1034600 Jon Marshall 2007-02-16T16:48:03Z