Pros and Cons of v-wire

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Pros and Cons of v-wire

L1 Bithead

I'm setting up a PAN firewall between our company and our business partners who have direct connections to our LAN.  My idea was to use v-wire but some of our other network administrators say it would be too difficult to troubleshoot.  What are the pros and cons of using v-wire versus just setting up a L3 interface?

2 REPLIES 2

L4 Transporter

The pro, you can have L3-L4 firewall, App-ID visability, ACC, (Threat protection, URL Filtering) and LOGs instantly without making any "major" network changes (ie, re-ip all devices, cabling, etc) .  All you need to do is to re-run couple of wires (depends on your network design).

 

Some other people consider vwire is more secured, because the attacker can't see the firewall mac address at all.   It could be a curse or  a blessing.   I can't say.  But it is another option to consider.

 

Just make sure you understand the spanning tree design consideraton,

 

https://live.paloaltonetworks.com/t5/Management-Articles/Spanning-Tree-Protocol-STP-packets-dropped-...

 

Cisco Link aggregation traffic,

 

https://live.paloaltonetworks.com/t5/Configuration-Articles/Cisco-Link-Aggregation-Traffic-Through-a...

 

 

 

 

 

Cyber Elite
Cyber Elite

@svanarts; The advantage of v-wire is that there really isn't anything additional to troubleshoot. You'll still get all of the same alerts through the managmenet interface; you never actually see the firewall on the network, and you can still take actions to actually stop the connections. 

  • 2979 Views
  • 2 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!