Altocumulus
MVPIndeed. 😊 If it works, it works.
If given the chance I'll always go for routed design over one-arm. But besides being a "personal" preference, I mentioned the routed design because it is a way to avoid source NAT. Knowing the full details about the application you want to serve is the key.
/Mike/
AdminNo doubt! I also prefer routed over one-arm for various reasons. I also prefer to segment DMZ vertically instead of hopping back and forth through same gear, and horizontally to isolate ingress and egress traffic (as it relates to whether the source is external or internal) but not everyone has the budget or greenfield options to accomplish that.
