layer-2 firewall

[gavin han]

Hi,

I'm interested in layer-2 firewall feature set.

internet--->firewall---->(load balancer)

load balancer is in our internal network....so all traffic will hit the load balancer VIP and they load balancer will route traffic to the server. load balancer and servers needs to be segregated from our internal network...

is it possible with ASA's layer-2 feature set?

[Federico Coto Fajardo]

Hi Gavin,

I don't think you should have any problems.

The ASA can act as a layer 2 firewall in transparent mode (much as a switch) but with the advantage of still having the firewall apply its security rules to the traffic passing through it.

Federico.

[Jennifer Halim]

Do you mean L2 (transparent) firewall? If yes, then the answer is yes, ASA firewall supports 2 modes: routed (L3) mode and transparent (L2) mode.

Here is configuration guide on the 2 firewall modes:

http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/fwmode.html

Hope that helps.