topic Re: A Summer Question: Craziest Next-Generation Firewall deployment? in General Topics

A Summer Question: Craziest Next-Generation Firewall deployment?

carnould — Wed, 05 Jul 2017 23:02:05 GMT

You've all been there, right? It's now time to have some fun sharing... Where is the craziest place you’ve had to deploy a Next-Generation Firewall (NGFW)? And – does that bring to mind any NGFW deployment tip to share?

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

davanderson — Thu, 06 Jul 2017 19:36:15 GMT

Location: Industrial water treatment plant.

Tip: Don't expose the parts to chlorine.

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

acc6d0b3610eec313831f7900fdbd235 — Fri, 07 Jul 2017 04:11:45 GMT

Location: Installed an evaluation for a coal export terminal customer one day in the middle of nowhere. Customer enabled SPAN/TAP on their old 3750 and brought the entire port system down.

Tip: Don't enable SPAN/TAP on old Cisco 3750 switches. Use VWire instead, and the result will still be amazing and the customer will gain the required visibility.

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

oscaringosv — Tue, 11 Jul 2017 14:05:03 GMT

Location: Small branch Offices with CISCOs ASA, migrate to PA-2XX series

Tip: I dind't use the migration tool for cisco FWs, I created a new configuration or Panorama templates/device configuration stacks, is by far better and faster than migrating all kind of rules, good if you have a lot of objects and subnets. Palo Alto firewall makes implementation way easier.

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

LCMember4723 — Thu, 13 Jul 2017 22:01:55 GMT

Flew from Los Angeles, CA to an Underground Parking Garage in Auckland, NZ

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

bmorris1 — Mon, 24 Jul 2017 09:35:14 GMT

Maybe not crazy, but defintiely the nicest, Hyde Park in London.

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

johnsonto — Fri, 29 Sep 2017 14:51:55 GMT

I didn't get to go but I had to deploy the firewall in London. Got a call at 3am in the morning and started configuring. It was a good time.

Todd

Re: A Summer Question: Craziest Next-Generation Firewall deployment?

Retired Member — Sat, 07 Oct 2017 15:42:31 GMT

Thanks for all your responses. We loved reading them, globetrotting with you, and sharing a few good laughs along the way. We've compiled all your answers here, Craziest firewall deployment, so that others may enjoy your travels and tips and be inspired...or at least amused. 🙂 Thanks again!