DMZ network

Hi anuj singh 

You may use or configure custom zone or DMZ on your free available Interface of XG appliance to segregate it from LAN network.

Below KBA will be helpful for zone creation or configuration.

https://community.sophos.com/kb/en-us/126185

Hi Vishal,

Thanks you quick response but where is core switches uses.

i want break network on core switches but as per your suggestion if we are break network on firewall.

Thanks

Anuj Singh

anuj,

you can create VLAN layer 2 on all switches and use XG as "router on the stick" to route and to filter the traffic via XG. On Cisco Layer 3 switch, you need to disable "ip routing"

Regards

I would rather assume you get in touch with a Sophos Partner to build up a new topology. 

We cannot consider all facts in your network to give you a proper answer.

Most likely you should build up everything via VLAN. 

Lferrara,

Can we manage network traffic by  Sophos for every  separated  VLAN which is create on Cisco layer 3 switch.

Lferrara,

Can we manage network traffic by  Sophos for every  separated  VLAN which is create on Cisco layer 3 switch.

If you create layer 3 on cisco, inter-vlan traffic will be managed by Cisco and never reaches XG where you can apply and filter vlan traffic.