Where should the gateway PC pointing to? Router or UTM Firewall?

[AC]

Hi All,

I am using C3750 (ipbase) as my lan switch, ISR 2821 for routing with 2 remote office, FG 110c as UTM firewall.

As this moment, all PC was pointing to the FG as there default gateway. I was wondering is it a good setting?

Should i change the default gateway setting on those PC from pointing to ISR 2821 instead of FG110c? 

Sorry for my english and for your attention.

Thanks

Alan

[Peter Koltl · Accepted solution]

multiple layer3 exit points (or entry points) in a subnet/VLAN is always a bad design as it results in asymmetric routing

another article 

you should only a single gateway on the user subnet and a dedicated subnet between router and firewall

[AC]

Hi Peter,

Thanks for your information. It helps me a lot.

Thanks

Alan