Route configure for internal firewall

[Cisco Kbsl]

Hi 

We are using three cisco 3750 stackable switches as our core. All the user traffic comes to relevant SVIs which configure in core, from the core there is a default route which goes to our perimeter firewall which is checkpoint. Actually we want to implement internal firewall to monitor internal traffic behavior and want to know the best practices and how the routing should be configure ? 

Regards

Shashi    

[John Blakley]

If you're just wanting to monitor, you could configure your 3750 to set the internal firewall as the default gateway, and then you'd set the existing firewall as the default gateway on the new internal firewall. You could control traffic and everything on your internal firewall just as you would on the existing one.

HTH,

John