Considering the location options
Installation Guide
21
you can take advantage of the other user guides in preparing this
appliance for use.
Considering the location options
This section proposes some basic network scenarios that should help you
determine where the appliance could be placed for the maximum benefit.
Generally, there are two general options for mounting a Firebox Vclass
appliance:
•
Inside the firewall, where it will protect a specific collection of devices
from access by unauthorized internal users.
•
As the firewall between your internal network and all external
networks.
Within those two general options, you have the following network-
placement alternatives:
Protecting one region of the network from unauthorized
internal access
You may want to protect one subnet or host from unauthorized internal
use by other internal network users.
In this scenario, the appliance should be placed so that the protected
subnet is connected to interface
0
and the rest of the network is connected
1install_guide.book Page 21 Friday, June 7, 2002 1:10 PM