2 Pix Blades to replace 2 Watchguards config question...

[cyberlinx2000]

Our setup right now is this:

We have 2 Watchguard firewalls. One is for one domain with 3 DMZ's and the other is for another domain with 1 DMZ. I was wondering if I can consolidate to 1 PIX and run the other pix in standby. Would anyone NOT suggest this if it is possible? I can't change any IP configurations. I need to keep everything the same as far as IP's and DMZ setups. Is this possible. I couldn't think of a way.

Ohh yea...we are still on NT4. Eventually going to AD someday :)

Thanks alot.

[jasobrown]

Ok so you have 2 Watchguard Firewalls and you want to replace them with 1 Failover Pair of Cisco Pix Firewalls?

If this is the case you can do this with no problem as long as you have the interfaces that you need on the new Pix FW's. If you dont have huge amounts of bandwidth going through the interfaces you can even use logical interfaces and dot1q trunks.