An organization has a compliancy requirement to protect servers from clients, however, the clients and servers all reside on the same Layer 3 network. Without readdressing IP subnets for clients or…

Question

Options

• ADeploy a firewall in transparent mode between the clients and servers.
• BChange the IP addresses of the clients, while remaining on the same subnet.
• CDeploy a firewall in routed mode between the clients and servers
• DChange the IP addresses of the servers, while remaining on the same subnet

• A
  72% (21)
• B
  3% (1)
• C
  17% (5)
• D
  7% (2)

Explanation

Traditionally, a firewall is a routed hop and acts as a default gateway for hosts that connect to one of its screened subnets. A transparent firewall, on the other hand, is a Layer 2 firewall that acts like a “bump in the wire,” or a “stealth firewall,” and is not seen as a router hop to connected devices. However, like any other firewall, access control between interfaces is controlled, and all of the usual firewall checks are in place. Layer 2 connectivity is achieved by using a "bridge group" where you group together the inside and outside interfaces for a network, and the Firepower Threat Defense device uses bridging techniques to pass traffic between the interfaces. Each bridge group includes a Bridge Virtual Interface (BVI) to which you assign an IP address on the network. You can have multiple bridge groups for multiple networks. In transparent mode, these bridge groups cannot communicate with each other.

No community discussion yet for this question.