In this scenario, the perimeter firewall is replaced
with the VM-Series firewall that can be deployed using L3, L2, or
virtual wire interfaces. All traffic on your network is secured
by the VM-Series firewall before the request reaches the NetScaler
VPX and is forwarded to the servers. For details, see Deploy
the VM-Series Firewall Before the NetScaler VPX.