- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Direct connect servers to FG
Hello
I have a small network. 2 dell hosts with 500gb ram each, one disk shelf connected in DAC 25gb/s mode to the servers. Servers connected 2x10Gb/s. Max 20 VMs
1x FG 100F 3-4x NAS each 1GB/s and about 80 users per LAN. 2-3 VLANS.
Currently, servers and all other network devices, as well as other switches in the company, are connected to two main switches (HA), which are further connected to the FG.
Soon I have to replace the above-mentioned main switches and I wonder if with such a small network and number of devices, I could connect most of the critical devices, e.g. servers and NAS directly to FG. Buy one instead of 2 switches.
What could be the disadvantages of such a solution, not counting a single point of failure, which is present in the current situation anyway. (I have insurance for FG and SLA unavailability time which I am able to accept)
Won't the FG be too heavy in such an environment?
My current switches are Dell 5548.
FG 100F has more then 12x 1GB and few 10GB ports...
- Labels:
-
FortiGate
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Advantages:
-
Simplified Network: Fewer devices make network management easier.
-
Visibility and Control: Better control and security monitoring.
-
Cost Savings: Fewer switches can save money.
Disadvantages:
-
Single Point of Failure: A failure in the FG can disrupt all connected devices.
-
Performance Impact: FG may become a bottleneck with heavy traffic.
-
Complexity: Increased configuration complexity.
-
Security Risk: Single firewall for all devices increases risk.
-
Performance Isolation: Devices' performance may not be fully isolated.
Recommendations:
-
Consider Redundancy: Plan for redundancy, possibly with a secondary FG.
-
Evaluate FG Performance: Ensure FG can handle traffic without issues.
-
Segmentation: Use VLANs for traffic isolation and security.
-
Regular Backups: Back up FG configurations regularly.
-
Monitoring and Alerting: Implement robust monitoring.
-
Consult Professionals: Seek expert advice for network design.
