Network security best practice assistance

sfarah001 — Fri, 21 Feb 2020 13:33:45 GMT

Our Internet access is connected to a Nexus 9500 switch. Internet traffic is passed through the Nexus to a none-Cisco firewall [master/slave fail-over] for filtering. Data is filtered by the firewall back to the L3 switch for routing to destination. I appreciate suggestion for enhancing network security by placing the firewall(s). Options: 1) Directly connect the Fortigate to the ATT internet router; place the nexus behind the firewall; 2) place a perimeter ISR router as the first point of contact to the Internet, followed by the firewall, followed by the Nexus. The nexus is connected to MPLS network and other remote sites use Internet/IPSEC tunnels to access resources at HQ. The Fortigate terminates IPSEC tunnels. Any suggestions to enhance network security from unauthorized access through the Internet would be appreciated.
I thank you beforehand.

This is your best starting

Chetankumar Phulpagare — Fri, 21 Aug 2015 19:01:33 GMT

This is your best starting point.

http://www.cisco.com/c/en/us/solutions/enterprise/design-zone-security/index.html

Also, check out the presentations and videos at Cisco Live On demand library. Registration is free.

https://www.ciscolive.com/online/connect/search.ww?zid=Global

Thanks,

Chetan

topic This is your best starting in Network Security

Network security best practice assistance

This is your best starting