https://community.cisco.com/t5/network-security/deploying-ftdv-on-prem-vs-cloud/m-p/4859113#M1101800 <P>Firewalls installed in the cloud are almost always used to secure access to and from resources in that same cloud. While you could technically route your on-premise traffic via an IPsec tunnel to that cloud firewall and thence on to the Internet, it would not make sense for any use case I can think of. Performance would be decreased and you would pay for the traffic going into and coming out of the cloud that doesn't need to go there in the first place.</P> Wed, 21 Jun 2023 04:48:37 GMT Marvin Rhoads 2023-06-21T04:48:37Z https://community.cisco.com/t5/network-security/deploying-ftdv-on-prem-vs-cloud/m-p/4859084#M1101799 <P>Hello,&nbsp;</P><P>&nbsp;</P><P>We are currently in the process of building the network infrastructure for one of our clients, and the IT management is considering deploying FTDv (Firepower Threat Defense virtual) in a public cloud, specifically on an ESXi server. I have a few questions regarding this:</P><P>1. Is it possible to deploy FTDv in the cloud to protect the LAN network on-premises?<BR />2. If FTDv is deployed in the cloud, how would the traffic flow work? For example, if a user on-premises wants to ping 8.8.8.8, would the packet go through an IPsec tunnel to the cloud network and then be subjected to NAT from the inside to the outside interface of the FTDv?<BR />3.&nbsp;<SPAN>Is it an ideal and common design practice to deploy FTDv in the cloud, particularly if the client lacks sufficient resources and powerful physical servers on-premises? Or should I advise them to invest in a physical server and deploy FTDv on-premises?</SPAN></P><P>&nbsp;</P><P>Thanks!</P><P>&nbsp;</P> Wed, 21 Jun 2023 01:58:58 GMT https://community.cisco.com/t5/network-security/deploying-ftdv-on-prem-vs-cloud/m-p/4859084#M1101799 MuathA. 2023-06-21T01:58:58Z https://community.cisco.com/t5/network-security/deploying-ftdv-on-prem-vs-cloud/m-p/4859113#M1101800 <P>Firewalls installed in the cloud are almost always used to secure access to and from resources in that same cloud. While you could technically route your on-premise traffic via an IPsec tunnel to that cloud firewall and thence on to the Internet, it would not make sense for any use case I can think of. Performance would be decreased and you would pay for the traffic going into and coming out of the cloud that doesn't need to go there in the first place.</P> Wed, 21 Jun 2023 04:48:37 GMT https://community.cisco.com/t5/network-security/deploying-ftdv-on-prem-vs-cloud/m-p/4859113#M1101800 Marvin Rhoads 2023-06-21T04:48:37Z