we are implementing SDaccess solution for our client, after all network device and configuration done from network side , client demanding for need to place firewall as well
, from network side i recommended firewall would place between router and fusion , but firewall guy does not agree they advise we have placed the firewall between fusion and border switch,
not sure which is correct, we also make sure latency between dnac and ise and dnac to edge switch and wlc have to be less. please advise what issue exactly facing if we place the firewall between fusion and border node, what right place for firewall, I am also attaching the diagram,
