Experts help needed...

[moimyrtho]

Guys you are the experts, and I need your help!!!

I have the network in the attached diagram, and I was given 2 ASAs 5520, 1 IPS 4240, and 1 Cisco ADE 1010 to introduce in the network. At this point, I need experts help on where to place these equipments in the network. Your suggestions will be great appreciated. Please see attached diagram. Thank you!

[Collin Clark]

To iron out a solid design we would need to know a lot more information. hat being said he is a rough outline of what I think is trying to be acheived.

[sansarav720e]

Hi ,

          Its is good to place your both ASA below to your two router , these asa can run in HA mode . Similarly your cisco ADE 1010 can be kept on DMZ zone on ASA segment . Your IPS can be kept inbetween your R1, R2 and ASA box .

        In this setup u need to have all predefined acl binded on outside interface of asa for permitting site 1 , site 2 ,site 3 traffic , else it will block the traffic by default . All routing can be be handled by ur core router and R2 & R1