Load balancing gateways

Inbound traffic?

 

 

What you're looking for is a firewall sandwich. Works fine, but you need an F5 (or HAPair) on EACH side of the firewalls. Works fine, but you need to think carefully about how you configure the monitoring to mark the gateways up/down (And there's a few boundary conditions to do with failures of the gateways, but they're pretty minor and as rare as your gateways actually falling over).