|
|
|
If the CNA system is placed inside your firewall, you will need to provide a GRE tunnel, or some other means of passage through the firewall, for measurement traffic. You must also allow the CNA engine module to establish a BGP peering relationship with your edge routers. See Figure 3.
Figure 3: CNA system entirely inside the firewall
|
|
|