About Satyam

- Check if the related interfaces are up and green on both side. Right Cable should connect to right interface 🙂 - Do you see related interface arp entry in both side Firewall and Router. - Check İF config on Firewall are they belong to same virtual router. -Check for defeault route in virtual router there should be 0.0.0.0/0 to isp router faced interface and ip.  -Try to ping internet from firewall, isp interface. -Try to ping internet from firewall  mng. interface. -Try to ping router from firewall 192.168.100.1 if to router 192.168.100.2 if. -Check İnterface Config on Firewall ip adress is not a shadow object, create an address object than assing it. -Check interface profile and allow ping. (You must write a rule) -Check interface and Zone seetings related interface is assign to related Zone -Check security policy create one any to any rule enable log start and log end to see whats hitting to firewall -Check NAT Rules.   Else You can place firewall as Wirtual Wire mode 🙂   Have a nice day. ... View more

Hello, If the connections to the first switch have multiple vlans, then yes you should use a trunk. Then do as @Basavaraj suggests and make the physical interfaces layer2 with layer2 subinterfaces. Then make your VLAN the layer3 interface.   Hope that makes sense. Regards, ... View more

@Satyam, No, use an actual proxy such as NGINX if you need to do something like this. You can create really hacky solutions using destination translations and multiple different IPs on your web server, but use the proper tool for the job and just setup NGINX or similar to handle something like this.  ... View more

@Satyam, Without knowing more about how the network is configured we, and you, can't tell you if the environment actually needs 25Gb capable firewalls. Depending on how the network is actually built, how the routes are actually configured, and what traffic is actually being inspected it's quite possible that kind of capacity is actually required.  ... View more

I agree with @BPry , HA doesn't really increase capability. Also, what hardware are we dealing with right now? and how much traffic are you having to handle? Are you decrypting? using GlobalProtect for remote access? etc? All of these things can matter in a deployment, and the number of users you are trying to support. ... View more