Our ISP provides a /27 block of IPs. I want to assign 5 IP's to one firewall, 1 IP to another firewall for now.
The firewall with 5 IP's will be a Sophos XG - 1 IP will be used for internal network and the other 4 will be assigned to the DMZ. I'm guessing I can do 1:1 NAT for these so each host in the DMZ can have it's own IP natted for services like www, ftp, etc..
My thought was to put something in front of both firewalls to be able to assign the IP space.
ISP -> SWorRTR -> FW1 -> Internal -> DMZ -> FW2 -> Service
Would a dumb switch work, or would I need something like a L3 switch? Would using a router be better?
From my understanding routers offer more features, but the routing is slower whereas L3 switch can cache the packets in the route table.