F5000

Large data centers are connected to the 10G core network usually through a 10G Ethernet. The F5000 firewall has a 10G processing capability and abundant port features. It can be deployed at the egress of a network to protect security for the internal network. You can deploy two firewalls to implement stateful failover.

•Active-active stateful failover can balance user data.

•Active-standby stateful failover improves availability of the firewalls. They back up each other to avoid a single point failure.

Figure 18 Network diagram

Firewall modules

Firewall modules work with the main network devices (such as 5800/7500/9500/12500 switches and 6600/8800 routers). Deployed at the egress of a network, the firewall modules can protect against external attacks and implement security access control of the internal network by using security zones. You can meet the development of the network simply by installing more firewall modules to a switch or router. Deploying two switches/routers with the firewall modules in the network can improve service availability.

12