Firewall Implementation Design

[Maro.Cisco]

i need to ask design question , i have servers that will be exposed to the internet access , also i have server farm which will be used to internal use , now what do u think of this design , Internet-----Redundant Firewall1 with IPS------Firewall 2----------Core switch -------------Distributuion switchs-------------End user.

Firewall1: outer interface to internet , Internal interface to firewall2 , DMZ interface to DNS and EMail server

Firewall2 : Outer interface to firewall1 , DMZ interface to Server Farm , internal interface for core switchs.

i was thinking to place Websense and bluecoat proxy servers to DMZ interface with server farm is this valid ????

[Julio Carvajal · Accepted solution]

Hello Maro,

Please mark this question as answered as we are already working on the other discussion

https://supportforums.cisco.com/message/3977840#3977840

Remember to rate all of the helpful posts.

For this community that's as important as a thanks.