Short answer
Yes. FirstNet hands off Ethernet from the FirstNet-managed router and your firewall connects behind it.
In detail
This split gives each party a clear role. FirstNet owns and monitors the access link through its managed router, which is on the PRTG platform for up/down and bandwidth alerting, while you keep control of your security policy and LAN. What to plan for:
- VLAN tagging and IP scheme requirements are confirmed during design.
- Business fibre includes up to two static public IPs by default: one used on the FirstNet router and one available for your own use, for example on the firewall for VPN or remote access.
- Additional public IPs can be added as an option.
- Your firewall and LAN configuration remain your responsibility unless separately scoped with FirstNet.
- Customer-supplied network equipment must be ICASA type-approved and approved by FirstNet's engineering team.
The same approach works for SD-WAN appliances. If you would rather not run the firewall yourself, FirstNet also offers hosted firewall and network security services, and its Security team can work alongside the Connectivity team on the design.
Source: FirstNet Fibre Connectivity service page →
Didn’t answer your question?