Sharing Management network

Dale_Lobb — Fri, 18 Sep 2020 16:42:26 GMT

I have a number of firewalls managed from one management system. That system lives in a dedicated management DMZ that is shared to all the firewall clusters.

I have a need to created three new clusters for a substantially different purpose than all the rest and they will report to a new management system. These new firewalls will not share any of the internal or external networks common to the original firewall clusters.

For simplicity's sake, I am contemplating placing the new management system in the same DMZ as the original and cabling the management DMZ to the new firewall clusters.

Is this a good idea? Or should I create a brand new management network for the new management system and new firewall clusters?

I am wondering if there could be collisions somewhere between the old and new firewalls if they share this management DMZ with two independent management systems. e.g. where the independent management systems may assign the same cluster ids (as in sk50840 where the management assigned cluster id is used for VMAC) to different clusters because they would not be aware of each other.

So, any leanings one way or the other?

Re: Sharing Management network

PhoneBoy — Sun, 20 Sep 2020 22:23:48 GMT

Other than the potential issue with cluster IDs, which I believe should be a non-issue in current gateway versions, there shouldn’t be any issues with this.

topic Re: Sharing Management network in Firewall and Security Management

Sharing Management network

Re: Sharing Management network