ASA Design Location

[mjensen323]

Hello, 

My network design consists of 8 remote locations in a Hub Spoke EIGRP. Each link is 10 gig or more. 

Each remote site is a 3750-x connected to 2(4500-X) in VSS for distribution. From there the 4500's are connected to a 3750-X which contains connections to the server farm, call manager, 8 gig lag from the 5508 wireless controller, etc.  It also contains a connection to the ASA / Internet connection (1 gigabit). 

Would the ASA be better suited in EIGRP connected to the distribution switch using a Copper SFP?  About 75% of the users are coming back to the Core using wireless. 

[Georg Pauwen]

Hello,

not sure if I understand your design. The ASA is now the edge device connecting to the hub ? What do you want to change, fiber to copper ? Post a brief schematic drawing if possible...

[Julio E. Moisa]

Hi

Usually the firewalls are installed on the perimeter (edge of the network, facing to internet) or to protect the server farm. Do you have any diagram?

You could install a firewall between the distribution/core switch 4500 and the 3750 switches used for servers. 

:-)