
12
F5000
Large data centers are connected to the 10G core network usually through a 10G Ethernet. The F5000
firewall has a 10G processing capability and abundant port features. It can be deployed at the egress
of a network to protect security for the internal network. You can deploy two firewalls to implement
stateful failover.
• Active-active stateful failover can balance user data.
• Active-standby stateful failover improves availability of the firewalls. They back up each other to
avoid a single point failure.
Figure 18 Network diagram
Firewall modules
Firewall modules work with the main network devices (such as 5800/7500/9500/12500 switches and
6600/8800 routers). Deployed at the egress of a network, the firewall modules can protect against
external attacks and implement security access control of the internal network by using security zones.
You can meet the development of the network simply by installing more firewall modules to a switch or
router. Deploying two switches/routers with the firewall modules in the network can improve service
availability.
Komentáře k této Příručce