HP VPN Firewall Appliances Getting Started Guide

14
F5000 application scenarios
Large data centers are connected to the 10G core network usually through a 10G Ethernet. The F5000
firewall has a 10G processing capability and abundant port features. It can be deployed at the egress
of a network to protect security for the internal network. You can deploy two firewalls to implement
stateful failover.
• Active-active stateful failover can balance user data.
• Active-standby stateful failover improves availability of the firewalls. They back up each other to
avoid a single point failure.
Figure 18 Network diagram
F5000-S/F5000-C application scenarios
Firewall application
An F5000-S or F5000-C at the egress of an internal network protects the internal network against
external attacks and controls internal access by classifying security zones.