fortigate routing

[dalepros]

Guys

i need some advice to get around this issue. my wan connection is a ASA (A)which routes some POS traffic via my default router  which sends it to ASA(B) and to a server.now we are testing a fortigate on the network which we want to use for default internet traffic.

the dilema starts here ... when internet users use the POS the traffic comes in on the ASA (A) headed to the router and ASA (B) then the server.. the return traffic from ASA (B) will then go out to their internet through fortigate when it is implemented and there lies the problem.

sending the traffic from A directly to B i believe is an issue because of the stateful devices haven't tested but i cant afford too much down time..

how do i impliment without interrupting pos traffic?

   

- See more at: https://supportforums.cis...g#sthash.QIjFRnaY.dpuf

[emnoc]

Sounds like you have to many devices in  the loop, but transparent mode sounds like what you need. Can you care to draft a simple diagram of the network and the POS devices layout? are these wire and wireless terminals?

If your POS subnet (s) is behind one router or ASA, I would look at a l2 transparent setup for the least interruption.

Just keep in mind;  "asymmertical routing buys you no benefit from a stateful inspection and possible other UTM features "

[dalepros]

hey em.. thanks for the response i like the idea... but in transparent mode i wont be able to use the other interfaces for any external facing devices is that correct? i have attached a logical diagram of what i have and what i percieve you have in mind