Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 728 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Adding an Additional Firewall to a LAN: Physical or Logical?

Houndstooth

Although I recently passed my CT30 certification, I am new to network administration so please forgive any incorrect assumptions in what follows.

I often hear people discuss the need to isolate dedicated network segments with an additional firewalls when adding high vulnerability services--services that VLAN segmentation alone is not a viable security solution. 

In the case that one needs to create such a segment on one's network, protected by an additional firewall, does physical hardware need to be purchased to make this happen (an additional UTM or XG box for example)? Or can existing network hardware be configured to create a new (logical) segment that is protected by a "second" firewall? 

That is a long question. Please let me know how I can better clarify if what I am asking does not make sense.

Thank you for your thoughts



This thread was automatically locked due to age.
Parents
  • 0

    Bob,

    I feel a bit foolish. I almost edited my post to ask whether an unused interface could be used to isolate a segment of the network. Now that you have confirmed, the answer seems obvious. 

    Unless bad actors know of a away to hop between segmented interfaces on the same hardware, there is anything to be gained by an additional box.

    As always, thank you for taking time to provide guidance to those of us who are new to the field.

Reply
  • 0

    Bob,

    I feel a bit foolish. I almost edited my post to ask whether an unused interface could be used to isolate a segment of the network. Now that you have confirmed, the answer seems obvious. 

    Unless bad actors know of a away to hop between segmented interfaces on the same hardware, there is anything to be gained by an additional box.

    As always, thank you for taking time to provide guidance to those of us who are new to the field.

Children
No Data
Unfiltered HTML