Where to put my firewall

I just got a new firewall "WatchGuard Firebox X700" and this is the first Firewall i have ever seen and used. Yes i am a newbie still. Anyways i am trying to figure out where exactlly where to put it at in my network. The following is how my network is.


Earthlink Netopia 4622 T1 Router "Running Nat" "Numbered IP Address"

48 Port Netgear Gigabit Switch


The T1 router plugs into the Switch and then all the users plug into the switch as well.


Thanks for the help

hcl1Asked:
Who is Participating?

[Webinar] Streamline your web hosting managementRegister Today

x
 
naveedbConnect With a Mentor Commented:
Thanks for the feed back.....On my firewall box i have an External port and then Ports 1 Thru 5........ Should i plug in the router in the external and then a cable in port 1 to the switch?

Yes, you will be expandin the ports on your firewall by connecting it to the switch. You may need to cross-over cable if you don't have a port that can connect two switches together MDI/MDIX.

Do you think earthlink will have any problems with takiing NAT off? I know i had major problems when i first got the T1 line becasue they didnt have NAT on our what they called "Numbered IP Address" and they had to go back and change my IP address.
 
I am not sure what the issue was originally. But give it a try, I have used this config few times without any issues. Do you have a single IP Address or a usable subnet of Public IP Addresses. If you have a single IP Address, then you may need to configure the T-1 router in a bridge mode if you disable NAT.
0
 
naveedbConnect With a Mentor Commented:
It should go between the T-1 router and Switch. If you want, you can move the NAT functionality to the WatchGuard to avoid duplicate NAT translations.
0
 
hcl1Author Commented:
Thanks for the feed back.....On my firewall box i have an External port and then Ports 1 Thru 5........ Should i plug in the router in the external and then a cable in port 1 to the switch?



Do you think earthlink will have any problems with takiing NAT off? I know i had major problems when i first got the T1 line becasue they didnt have NAT on our what they called "Numbered IP Address" and they had to go back and change my IP address.
0
SMB Security Just Got a Layer Stronger

WatchGuard acquires Percipient Networks to extend protection to the DNS layer, further increasing the value of Total Security Suite.  Learn more about what this means for you and how you can improve your security with WatchGuard today!

 
hcl1Author Commented:
Thanks again......Earthlink provides us with a static WAN IP address and then a block of Useable IP address as well. We dont own any of them. Should i still be good?
0
 
naveedbConnect With a Mentor Commented:
Yes, you should be fine. Assign one IP address from the block to the WatchGaurd and you should be good to go.
0
 
hcl1Author Commented:
Thanks for all the info... I am going to give it a try next weekend because i have alot to put together first and plus nobody will be there on the weekend.
0
All Courses

From novice to tech pro — start learning today.