topic Re: Transparent Firewall in Network Security

Transparent Firewall

virtuacco — Mon, 11 Mar 2019 16:09:25 GMT

If you want to manage a transparent firewall that resides in a different VLAN/IP subnet do you just add a route to the transparent firewall back to the managing host?

Re: Transparent Firewall

jbayuka — Tue, 01 Sep 2009 21:11:53 GMT

A typical Cisco IOS Firewall is a Layer 3 device with trusted and untrusted interfaces on different IP subnets. A Layer 3 firewall works well with Cisco IOS devices that function as routers with preexisting subnet separations. However, when a Layer 3 firewall is placed in an existing network, the network IP addresses must be reconfigured to accommodate the firewall.

A transparent Cisco IOS firewall acts as a Layer 2 transparent bridge with context-based access control (CBAC) and ACLs configured on the bridged interface. Because the Layer 2 firewall intercepts packets at Layer 2 and is "transparent" to the existing network, Layer 3 firewall limitations are not applicable.

Re: Transparent Firewall

Collin Clark — Wed, 02 Sep 2009 12:33:47 GMT

Transparent firewall mode on the security appliance allows only two interfaces to pass through traffic. However, you can set up a dedicated management interface, which can be either a physical interface or a subinterface, as a third interface. This interface must be set up for the management-only command. Place this interface into your management VLAN.

Hope that helps.

Re: Transparent Firewall

jthomp7626 — Fri, 04 Sep 2009 20:02:34 GMT

Hello. PTI

Will this scenario support TACACS+ commands? Want to enable report generation in TAACS+ Administration.

Re: Transparent Firewall

Collin Clark — Fri, 04 Sep 2009 20:05:21 GMT

Yes it should.