Detailed presentation

In the architecture shown, traffic between the agency's client workstations and servers at the remote head office is shared between several links depending on their nature. These links are managed by external interfaces (unprotected) on both firewalls (each of these interfaces has a dedicated IP address). Traffic is distributed following routing instructions specified in the filter rules (Policy Based Routing):

• HTTP and FTP traffic go through the link named WAN1,
• "Production" traffic goes through the link named WAN2,
• the link named WAN3 is used for VoIP traffic.