Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 5 subscribers
  • Views 27819 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM interface to connect to on-the-premises router (behind the firewall) with a WAN IP

B.R.O.

On this diagram we have several objects to look at

WAN IP = 12.12.12.35

LAN IP of UTM = 8.8.8.8

WAN IP of Router behind firewall = 12.12.12.36

LAN IP of Router behind firewall 8.8.8.4

 

 

How would you configure Port 4 to plug a cable from the UTM to the WAN Port of the Router? 

 

I plan to configure interface X4 = 12.12.12.36/32 proxy-arp enabled

 

now granted if the firewall rules are correct to allow full ip from 12.12.12.36 to get out through the internet to connect to defined router (10.10.10.10)

I think the Utm will see traffic from defined router (10.10.10.10) from any source (port 2 wan 12.12.12.35), permit it to pass to port 4 12.12.12.36.  Transparent traffic ???

In theory this should work right?  

If the router because of vpn tunnel policies didn't need the wan ip configured a nat rule would be sufficient.  

Other alternative create dmz ip for the interface and have the router's wan ip changed to avoid messing up the routing table.



This thread was automatically locked due to age.
Parents
  • 0

    Hello,

     

         What are the goals?

     

    BTW. Is the Router also the FW? 

     

    I ask because our environment is:  ISP WAN Router--> Our WAN Router-->ASA FW -bridged->UTM-->Switch 

    Our previous goal (currently used) was to use the UTM as a more refined FW, as compared to the basic ASA.

    We are now planning on replacing the ASA's instructions with the UTM (FW,ACLs,Objects,NAT)

Reply
  • 0

    Hello,

     

         What are the goals?

     

    BTW. Is the Router also the FW? 

     

    I ask because our environment is:  ISP WAN Router--> Our WAN Router-->ASA FW -bridged->UTM-->Switch 

    Our previous goal (currently used) was to use the UTM as a more refined FW, as compared to the basic ASA.

    We are now planning on replacing the ASA's instructions with the UTM (FW,ACLs,Objects,NAT)

Children
No Data
Unfiltered HTML