dual firewall

[kittenpiggy]

Hi Sir.

Attached with Dual Firewall design , can anyone sharing with me is this workable ?

Regards,

Jackal

[Jon Marshall]

Jack

Not sure what your ASA is doing other than providing another vendors firewall as added protection. Why are the servers hanging off the Juniper on a L3 switch ?

Generally with type of setup you put the servers your want to firewall in between the 2 firewalls. The servers would have 2 NICs and each NIC would be attached to a different DMZ ie.

dmz1 connected to ASA

dmz2 connected to Juniper

server1 outside NIC connected to dmz1

server 1 inside NIC connected to dmz2

Could you clarify the thinking behind the L3 switch and only connecting to Juniper firewall ?

Jon

[kittenpiggy]

Hi Jon.

Really thanks for the advise and guidance , i am very new to this therefore

i really need someone to advise me .

however, based on your comment . is that means i need another L2 switch for

ASA to connect into DMZ. i have amended the diagram.

mind to point out my mistake and thanks for your guidance .

On Thu, Sep 22, 2011 at 6:35 PM, jon.marshall <