Skip to main content
dalepros
New Member
June 26, 2015
Question

fortigate routing

Guys

i need some advice to get around this issue. my wan connection is a ASA (A)which routes some POS traffic via my default router  which sends it to ASA(B) and to a server.now we are testing a fortigate on the network which we want to use for default internet traffic.

the dilema starts here ... when internet users use the POS the traffic comes in on the ASA (A) headed to the router and ASA (B) then the server.. the return traffic from ASA (B) will then go out to their internet through fortigate when it is implemented and there lies the problem.

sending the traffic from A directly to B i believe is an issue because of the stateful devices haven't tested but i cant afford too much down time..

how do i impliment without interrupting pos traffic?

   

- See more at: https://supportforums.cis...g#sthash.QIjFRnaY.dpuf

    2 replies

    emnoc
    New Member
    June 26, 2015

    Sounds like you have to many devices in  the loop, but transparent mode sounds like what you need. Can you care to draft a simple diagram of the network and the POS devices layout? are these wire and wireless terminals?

     

    If your POS subnet (s) is behind one router or ASA, I would look at a l2 transparent setup for the least interruption.

     

    Just keep in mind;  "asymmertical routing buys you no benefit from a stateful inspection and possible other UTM features "

     

    dalepros
    daleprosAuthor
    New Member
    June 26, 2015

    hey em.. thanks for the response i like the idea... but in transparent mode i wont be able to use the other interfaces for any external facing devices is that correct? i have attached a logical diagram of what i have and what i percieve you have in mind

    Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.
    Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.
    Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT