H3C Technologies H3C SecPath F1000-E - Manual (Page 15)

7
Figure 10 Network diagram
SecPath F1000-E application
Deployed at the egress of an enterprise network, F1000-E firewalls can protect against external attacks,
ensure security access from the external network to the internal network resources (such as servers in the
DMZ zone) through NAT and VPN functions, and control access to the internal network by using security
zones. You can deploy two firewalls in the network for redundancy backup to avoid a single point failure.
WAN
F100-A
F100-A
… …
F1000-A-EI