Firepower (1010) Topology

[Bob33]

The installation manual suggests to connect the firewall in between the modem and the router. In my case the ISP has combined that in one device. Do I now connect it before the modem/router or after?

[Marvin Rhoads · Accepted solution]

It should be between your network and that of your provider.

Your network > Firepower > Provider equipment

[Bob33]

Thank you for your reply, and it indeed sounds obvious, but would imply that the devices connected to the (also) build in wireless acces point would be outside of the safety of the firewall. Correct?

Current situation:

ISP entrance > ISP supplied modem/router/wireless_acces_point > My network (switch)

You say:

ISP entrance > ISP supplied modem/router/wireless_acces_point > Firepower > My network (switch)

instead of,

ISP entrance > Firepower > ISP supplied modem/router/wireless_acces_point > My network (switch)

Correct?

[Marvin Rhoads]

Ah you hadn't mentioned earlier that your ISP device is also the WAP.

Often you cannot put anything between the ISP device and the entrance as they restrict the directly connected device to those which they provide. However each ISP's policy on this varies - you would have to contact them to see if it is possible.