Firewall Policies with Nile

introduction this document provides firewall policy recommendations when the nile service gateways are l3 connected to the internet/intranet enterprise firewall in this case, the nile service 1g/10g uplinks are directly connected to one or a pair of firewalls the connections are layer3 only and the firewall(s) interfaces ip addresses act as default gateways for the nile gateways firewall networking design there are typically two (2) ways that firewalls are connected to the ‘trusted’ enterprise network vlan/subnet termination direct the termination of vlans and/or subnets is direct, where the firewall acts as the core routing switch this is an ideal connectivity for segmenting the internal traffic vlans/subnets are mapped to firewall zones and policies are easily built between zones such design is popular with small to medium enterprises (sme), due to its simplicity with the firewall acting also as a core switch/router indirect