I've recently transitioned to a sys admin role and have been tasked with setting up our infrastructure from scratch, which has been an exciting learning opportunity! Before this, we didn't have any servers or firewalls. We invested in a few pieces of equipment: a Fortigate 90G Firewall, a D-Link DES-1024 Unmanaged Switch, and several PCs for a cluster setup that suits our needs with a tight budget.
Currently, our configuration consists of an ISP ONT connected to a Fortigate 90G that feeds into a switch and a Linksys E7350 access point in bridge mode. I had struggled with the Linksys acting as a router extender before, which caused connectivity issues, so I decided to switch to bridge mode and enabled NAT on the Fortigate. Additionally, the ISP ONT is set to DMZ mode and directs to the Firewall's IP.
I'm looking for feedback: Are there better practices or improvements I can make with this setup?
2 Answers
If you're able to, I’d recommend replacing the Linksys E7350 since it's been pretty unreliable. Now could be a great time to upgrade!
There are definitely a lot of improvements you can consider. For starters, it’s best to turn off the WiFi and NAT features on the ISP device if you haven't already. Using a dedicated Wi-Fi solution, like UniFi for example, tends to be way more reliable than what you're currently using. The Linksys should go!
I think the OP already mentioned they turned off WiFi and NAT on the ISP device in their setup. So maybe look into other options!