Threat Management Gateway Replacing PIX
Posted on 2011-02-21
Hi I am installing on a brand new infrastructure, 2 new TMG 2010 servers, running on W2008 Standard.
Each server has its own IP of course. The plan is to create an array of TMG to allow redundancy and load balancing.
Currently we have a PIX, which is being removed. This is connected to a modem, and also to a switch (2960). Routing was moved recently from the PIX to the core 3560.
PIX therefore currently supplys just internet access.
Can I do the following? The 2 TMG's are also on the layer3 3560. They are not connected directly to the modem. Can I connect the modem to the router, and then control firewall via TMG array? If so how?
Or should the 2 TMG servers be connected to the modem?