I have a firewall. Where should I install PacketShaper on my network?

Products

• PacketShaper

Issue/Introduction

Setup and Configuration Topology

Resolution

This depends on the type of firewall you have. There are two kinds of firewalls: NAT and Proxy. NAT firewalls translate inside, un-routable, private IP addresses into public IP addresses for outbound Internet traffic. Proxy firewalls terminate the outbound connection and make a request in behalf of the terminated connection, hence the term “proxy”. PacketShaper should normally be connected behind a NAT firewall. If you have a lot of DMZ traffic that should be monitored, you can connect the PacketShaper in front of your firewall so that traffic is monitored from both the DMZ and the Internet. Connect PacketShaper in front of a proxy firewall.