Dual ISP on a Transparent Firewall

[risarora]

Hi,

I have a query regarding a single transparent firewall being deployed as ISP terminating firewall in a network design, now I want to use another ISP for redundancy and want to terminate on the same firewall.

I know that Route tracking(IP SLA) and PBR (Policy based Routing) does not work on a Transparent firewall and I don't want to terminate ISP on a router due to resource limitations, so is it possible to have ISP redundancy on a transparent firewall in case of the above scenario.

[Pranay Prasoon]

Though we may design it, but still you will need a have sla or PBR on 

                   ISP1                                        ISP2

                       |                                              |

                       |                                              |

                    BVI1    (ISP1 IP)                     BVI2  (ISP2  IP)

                       |                                               |

                     R1                                            R1

Now you will have to either use sla or PBR on R1