Options

Single ISP, multiple External IPs

JennelleHJennelleH
in Firebox - Networking, Multi-Wan, VLAN, NAT, SD-WAN

We have a single ISP that has provided us with a block of IP's. Currently, we have assigned one of those IP's to a contractor on site, who have their own Firebox firewall. We have just upgraded to a M270 with web blocker enabled. We would like the contractor to feed through our Firewall to ensure that inappropriate content is filtered out from their IP. I have never put a firewall in front of another. Please advise the best way to do this.

Answers

  • Options
    james.carsonjames.carson Moderator, WatchGuard Representative

    Hi JennelleH,

    The most straighforward way would be to simply enable webblocker on the contractor's device. That would keep the load from that traffic on that device, and not passing through two devices.

    If that's not an option:
    -Does the contractor have any other services like site to site VPNS or traffic that can't traverse through a proxy?
    -Does the contractor's device have to maintain the public IP, or can it be given a private IP by your M270?

    I'd suggest opening a support case with the above info, and a network diagram so that one of our techs can assist you -- you can use the Support Center button on the top right of this page to do that.

    Thank you,

    -James Carson
    WatchGuard Customer Support

Sign In to comment.