Short answer
FirstNet's standard is a FirstNet-managed router, because it lets FirstNet monitor the link and resolve faults quickly. Your own firewall can sit behind it on an Ethernet handoff, and any customer-supplied network equipment must be ICASA type-approved and approved by FirstNet's engineering team.
In detail
Why the managed router matters:
- It is added to FirstNet's PRTG platform for SNMP-based up/down alerting and bandwidth monitoring.
- FirstNet sets it up at installation, with sync, throughput and failover testing where applicable.
- It remains FirstNet property and is covered by FirstNet's maintenance and replacement policies.
- It gives the NOC a consistent view of the link when working faults with the carrier.
Keeping your own firewall or SD-WAN device behind the FirstNet router gives you control of security and LAN policy without losing managed monitoring of the access link. VLAN tagging and IP scheme requirements are confirmed during design, and business fibre includes up to two static public IPs by default, one of which is available for your own use. Your LAN and firewall configuration stays your responsibility unless it has been separately scoped with FirstNet.
Source: FirstNet Nationwide Last-Mile Connectivity service page →
Didn’t answer your question?