A Summer Question: Craziest Next-Generation Firewall deployment?

[carnould]

You've all been there, right? It's now time to have some fun sharing... Where is the craziest place you’ve had to deploy a Next-Generation Firewall (NGFW)? And – does that bring to mind any NGFW deployment tip to share?

[davanderson]

Location: Industrial water treatment plant.  

Tip: Don't expose the parts to chlorine.

[acc6d0b3610eec313831f7900fdbd235]

Location: Installed an evaluation for a coal export terminal customer one day in the middle of nowhere. Customer enabled SPAN/TAP on their old 3750 and brought the entire port system down. 

Tip: Don't enable SPAN/TAP on old Cisco 3750 switches. Use VWire instead, and the result will still be amazing and the customer will gain the required visibility.

[oscaringosv]

Location: Small branch Offices with CISCOs ASA, migrate to PA-2XX series  

Tip: I dind't use the migration tool for cisco FWs, I created a new configuration or Panorama templates/device configuration stacks, is by far better and faster than migrating all kind of rules, good if you have a lot of objects and subnets. Palo Alto firewall makes implementation way easier. 

[LCMember4723]

Flew from Los Angeles, CA to an Underground Parking Garage in Auckland, NZ

[bmorris1]

Maybe not crazy, but defintiely the nicest, Hyde Park in London.

[johnsonto]

I didn't get to go but I had to deploy the firewall in London.  Got a call at 3am in the morning and started configuring.  It was a good time.  

Todd

[Retired Member]

Thanks for all your responses. We loved reading them, globetrotting with you, and sharing a few good laughs along the way. We've compiled all your answers here, Craziest firewall deployment, so that others may enjoy your travels and tips and be inspired...or at least amused. 🙂  Thanks again!