Firepower Appliance Design verification

[msameerkn]

Hi All ,

We have completed implementation of Firesight and 2 x FirePOWER 8120 with active/standby mode and  everything working as expected .

The client wanted to enable bypass mode, unfortunately bypass mode will not support with HA , we need to re design without HA .

please refer below design ,  whether this design will create any loop or  have any problems with TCP flows ?

Appreciate any advice ,

Thank you

[Farhan Mohamed · Accepted solution]

The network design looks good to me as per cisco guidelines go along, Please do have a look at the link below for design guide:

http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-secure-data-center-portfolio/threat-mgmt-ips.pdf

Also can we have a webex, to have a detailed discussion if it does not solve the problem yet.