topic Re: L2 communication spanning two firewalls in Next-Generation Firewall Discussions

L2 communication spanning two firewalls

hamza_d — Sat, 04 May 2024 01:21:53 GMT

Hello,

I have the architecture outlined below, and communication needs to be established between the machines on the network 10.1.2.0/24 via FW1 (Palo Alto) and FW2 (fortigate). Could you please offer a solution to accomplish this?

Thank you.

Re: L2 communication spanning two firewalls

reaper — Mon, 06 May 2024 08:43:03 GMT

On the Palo side you have the option of using a VWire (2 interfaces connected as a virtual wire), or setting 2 interfaces to Layer2 mode and putting them in the same vlan

in both cases give each interface it's own zone and then create 2 security rules

zone a to zone b

zone b to zone a

and it will work like a charm

on the forti side you probably need black magic (sorry, you'll need to go ask fortinet)

Re: L2 communication spanning two firewalls

S_Williams901 — Tue, 07 May 2024 18:37:11 GMT

This method is similar on the Fortigate. You can assign layer 2 vlans to ports on the forti.