How to connect a firewall correctly?

Question

Computer networks

New place of work. For some reason, the firewall is connected like this:

It is clear that this is some kind of perversion. But, due to a small skill, it is not clear to me where to put the firewall? Before the router or after? It seems to me that the correct way is:

Please explain to me.

Answer 1

I like the first pattern better. VLANami all lokalka is wrapped up on kerio, kerio and acts as a firewall for all locale. Between Kerio and the router you will have a DMZ, for all sorts of troubles and needs)

Answer 2

If the ports on the routers are in short supply, you can do so. After all, there are most likely several vlans on the switch, and maybe even a couple of L3 interfaces.

Answer 3

Quite a normal pattern. Mikrotik is already acting as a firewall. Users and printers will not get access to the Internet bypassing Kerio.