Help with choosing Firewall device ??????

[rajeshdavid]

Hi all,

We bought a SA 540 Security Appliance to provide firewall protection for our servers.

These servers run with public ip and there in no natting any where.

I need to provide a layer of firewall protection with out changing the ip of these servers.

This device SA 540 Security Appliance does not let me configure ip from the same subnet, (WAN & LAN)

I am trying to assign WAN & LAN ports with ips from the same subnet like the servers. So that i can create rules for WAN and LAN.

I have done this type of setup with a PIX 515  a while ago, what device can do this for me ? Stealth mode protection, with out any NAT or changing the Ip of

the servers.

Should i go for ASA.??

Any help is greatly appreciated.

Jenefa

[manish arora]

Hi Rajesh,

I am not familiar with SA 540, but yes , you can use  the ASA in transparent mode to do that.

Here's the link for further look into ASA's transparent.

Manish

http://www.cisco.com/en/US/products/hw/vpndevc/ps2030/products_configuration_example09186a008089f467.shtml#diag