Design

[engmohamad1980]

Hello

I Have three four site each site contains 1500 users , and i have servers room  in each site .

and i have HQ contains ( Core switch 6509 , firewall on the same switch and some switchs .........) , i want linking these sites to server room Fiber .

the question any better in design

1- Buy the Core switch with blade Firewall to each site ,

2- Buy License firewall  in Core switch in HQ to Increase the fabric of the Blade Firewall .

thanks

[Kent Heide]

I would segment with firewalls / routers so that you'd have L3 out to the locations instead of terminating in the HQ. This opens up for more flexibility (and less STP).

You don't need to necessarily buy FWSM modules and chassis for the remote locations. You could also look at getting 5540's or 5550's.