Short answer
Yes. FirstNet hands off Ethernet from its managed router, and your own firewall or SD-WAN device connects behind it. VLAN tagging and IP scheme requirements are confirmed during design.
In detail
The FirstNet-managed router stays in place because it is how FirstNet monitors the link and resolves faults quickly: every managed router is added to the PRTG monitoring platform with up/down and bandwidth alerting. Your security and overlay devices sit downstream and remain under your control. Points worth knowing:
- Your LAN and firewall configuration stays your responsibility unless it has been separately scoped with FirstNet.
- Business fibre includes up to two static public IPs by default: one used on the FirstNet router and one available for your own use, for example for VPN or remote access.
- Customer-supplied network equipment must be ICASA type-approved and approved by FirstNet's engineering team.
- Dedicated Internet Access is compatible with enterprise routing platforms, SD-WAN, firewall and cloud connectivity solutions.
If you would rather hand over the overlay as well, FirstNet offers managed SD-WAN, where its Connectivity and Security teams validate the architecture together, and it can supply the fibre, DIA, LTE/5G, microwave and LEO satellite underlays.
Source: FirstNet Connectivity service page →
Didn’t answer your question?