Hello
I have a small network. 2 dell hosts with 500gb ram each, one disk shelf connected in DAC 25gb/s mode to the servers. Servers connected 2x10Gb/s. Max 20 VMs
1x FG 100F 3-4x NAS each 1GB/s and about 80 users per LAN. 2-3 VLANS.
Currently, servers and all other network devices, as well as other switches in the company, are connected to two main switches (HA), which are further connected to the FG.
Soon I have to replace the above-mentioned main switches and I wonder if with such a small network and number of devices, I could connect most of the critical devices, e.g. servers and NAS directly to FG. Buy one instead of 2 switches.
What could be the disadvantages of such a solution, not counting a single point of failure, which is present in the current situation anyway. (I have insurance for FG and SLA unavailability time which I am able to accept)
Won't the FG be too heavy in such an environment?
My current switches are Dell 5548.
FG 100F has more then 12x 1GB and few 10GB ports...
Advantages:
Simplified Network: Fewer devices make network management easier.
Visibility and Control: Better control and security monitoring.
Cost Savings: Fewer switches can save money.
Disadvantages:
Single Point of Failure: A failure in the FG can disrupt all connected devices.
Performance Impact: FG may become a bottleneck with heavy traffic.
Complexity: Increased configuration complexity.
Security Risk: Single firewall for all devices increases risk.
Performance Isolation: Devices' performance may not be fully isolated.
Recommendations:
Consider Redundancy: Plan for redundancy, possibly with a secondary FG.
Evaluate FG Performance: Ensure FG can handle traffic without issues.
Segmentation: Use VLANs for traffic isolation and security.
Regular Backups: Back up FG configurations regularly.
Monitoring and Alerting: Implement robust monitoring.
Consult Professionals: Seek expert advice for network design.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
User | Count |
---|---|
1759 | |
1116 | |
766 | |
447 | |
242 |
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2025 Fortinet, Inc. All Rights Reserved.