User guide

Chapter 3: Getting Started
24 WatchGuard Firebox System
An example of a network before the Firebox is installed appears in the
following figure. In this example, the Internet router performs network
address translation (NAT) for the internal network. The router has a
public IP address of 208.15.15.1, and the private network has an address of
192.168.10.0/24. This network also has three public servers with the
addresses 208.15.15.10, 208.15.15.15, and 208.15.15.17.
.
The following figure shows the same example network with a Firebox
deployed. The IP address of the Internet router in the previous figure
becomes the IP address of the Firebox’s default gateway. This network
uses drop-in configuration because the public servers will maintain their
own IP addresses. Drop-in configuration simplifies the setup of these
devices. For more information on this type of configuration, see “Drop-in
configuration” on page 27.
By configuring the Optional Interface on the example network, the public
servers can be connected directly to the Firebox (because they are on the
same subnet as the Firebox).