3200 Appliance deployment

[AdaCoul]

Hi everyone,

I had to deploy a 3200 Appliance in a customer network. Diagram in attached.

I expect to push the 3200 in front of the ASA Appliance and I would like to know if this postion is the bestest for the config.

At the other hand I have the choice between removing the ASA Appliance and doing the config only with the CheckPoint or keeping the ASA (Customer give me the choice). Configs on the ASA : Openning ports for internal Application, ACLs, VPN (Not working because licence is off since 3 years).

So in this situation what's the best config to do ?

[PhoneBoy · Accepted solution]

I see no reason to keep the ASA here.
Obviously you want to replicate the configuration on the Check Point.
The SmartMove tool may make this process a bit easier.

[AdaCoul]

Hi PhoneBoy,

This is the the same thing I told my self.

Thank a lot for your reply