Branch Office Internet through HQ Firewall & ISP

[Devraj_singh]

My office has four branches all are connected through MPLS and has separate ISP for each branch, in our head office we' ve 8 Mbps internet link and our plan is to disconnect branch office ISP and run there internet from head office firewall (200B / 8 Mbps). Please help me to do that. Regards Devraj

[rwpatterson]

1) Create policies in the corporate firewall allowing the remote sites from their individual tunnels to the Internet 2) Create policies in the individual branches for traffic to the Internet through the tunnels. 3) Change the default gateways on the branch offices to the VPN (MPLS) circuit.

[Devraj_singh]

Thanks for your quick response. 1 - Our MPLS connectivity provider is using 40 C on all location to get the MPLS connectivity done, and in our corporate office ISP is also terminated on 40C firewall. 2 - do we need to set corporate office firewall local ip as the gateway of branch offices?

[rwpatterson]

Please, draw us all a picture.