The position of Panda GateDefender Integra in the network varies depending on the role of the device in the network: transparent mode or router mode.
The network infrastructure and the extension of the implementation in each case will also influence the position. Below is a description of the general functioning of both modes.
- Transparent mode: The device will be placed between the internal LAN and the Internet, controlling both inbound and outbound traffic.
- Router mode: When the unit is configured in router mode, positioning the unit is slightly more complex, as more than two networks will be connected to the device, extending its roles (router, firewall and VPN). In router mode, apart from the WAN/LAN, the device will also be connected to the DMZ and other local subnets.
In general, two situations can arise:
Panda GateDefender Integra is the only device that is going to cover all protection functions through its services.
Obviously, it will be placed in the Internet gateway (in front of any router device). In this case, the services will share a device but, configuration and management will be carried out from a single console.
If the user already has firewall services from other manufacturers, Panda GateDefender Integra will be placed behind the firewall.
This means that the VPN server will be totally protected, but the flow of encrypted traffic through the firewall will slow down slightly. Finally, the paths in the firewall must be configured towards the VPN server to redirect all the traffic.
The configuration and position will largely depend on the infrastructure of the environment where will be installed.
For more information about the difference between transparent mode and router mode, click here.