Firewall Behind Router Cisco

Forum|Forum|2 years ago
October 17, 2023
5 replies
3863 views

Hi team

This is a case for a question, we have a client who wants to implement a Fortigate 100F firewall behind his Cisco Catalyst82000 router...
So, i would like to know if in this case it would be better to use it in transparent mode, since what they specifically need to use are functions like Web Filter and Applitacion control and integrate it with your Active Directory,
at this point can you consider using transparent mode for this? or is NAT mode the best option? What could be the best practice?

FortiGate

nanami04

New Member

The router should be in between the firewall and ISP for routing internet and VPN traffic. The firewall should filter traffic internally and on the internet. I personally like using a firewall for inter-VLAN routing as it’s much easier to control traffic as opposed to access-lists (standard and extended).

wamendozaAuthor

Explorer II

Thanks for answer me

I think that in this case what the client wants is to generate the least impact they want to maintain something like that IPS->C8200->Firewall->LAN

hbac

Staff

Hi @wamendoza,

It depends on your network requirement, if NAT is not needed you can use transparent mode. Please refer to the following links to see the differences between NAT and transparent mode:

https://docs.fortinet.com/document/fortigate/7.4.1/administration-guide/617430/system

https://www.fortinet.com/resources/cyberglossary/transparent-firewall

Regards,