Transparent Mode - Watchguard V10 User Manual

Transparent Mode

Not Trusted
Internet
Not Trusted
Internet
Existing Network with a Transparent Mode Vclass appliance
Figure 7: Vclass Transparent Mode operation
Vclass Transparent Mode is designed to allow simple
"drop-in" integration of the Vclass appliance in an existing
network topology. Figure 7, "Vclass Transparent Mode
operation," on page 81, depicts a typical Transparent Mode
scenario. In this scenario, the Vclass is placed between an
existing router gateway and an internal network. Routing
functions are handled by the router, and the Vclass pro-
vides firewall and VPN functions.
The main differences between Transparent and Router
modes are:
• Transparent mode interfaces are promiscuous. A
promiscuous interface receives not only the packets
addressed to it (as in Router Mode), but also packets
addressed to other hosts on the network. However, the
Vclass appliance passes packets without taking any
action, if both the packet source and target are
connected and reachable on the same interface.
Firebox Vclass User Guide
Router
Existing Network
Router
Transparent Mode
Not Trusted
Trusted
Vclass
81