The Gateway does not support a traditional "bridge" mode, but can be setup to mimic the functionality using port forwarding. If you want to mimic that behavior you will need to assign your end-device (firewall, router, etc) a static DHCP reservation and then setup port forwarding rules to send all inbound traffic to your selected IP address.
You can this do by configuring the ICG to assign a static IP to the firewall/router via DHCP in the local page. Steps are as follows:
Login to the web portal
Go to Network Configuration from the left-hand navigation pane
Go to Ethernet tab on the top of the page
Click Enable DHCP Reservations (check mark should be showing)
Click on New
Enter the MAC address (make sure to include colons) of the device to which you would like to assign a specific IP address
Enter the IP address that you would like to assign to the device (within the correct pool address range)
Click Save Changes at the top of the page.
To accomplish the same functionality as bridge mode, you can setup port forwarding on all ports to send all incoming traffic directly to your existing firewall/router and then you can assign the firewall/router its own static IP. Create a port forwarding rule that forwards all ports to your existing firewall/router, but avoid ports 22(SSH), 2222(SSH), 80(web app), and 443(web app). Steps for accessing the Port Forwarding page:
Login to the web portal
Go to Network Configuration from the left-hand navigation pane
Go to Port Forwarding tab on the top of the page
Type the inbound interface if desired. Possible values are wan, lan, eth, wifi, or cell. Only traffic on the selected interface will be forwarded to the desired destination
Enter the Inbound Port numbers (can be specified as single value, comma separated list, or range)
Select the desired Protocol (TCP/UDP/ICMP)
Enter the Target IP Address
Enter the Target Port
When complete, press the Save Changes button.
Please refer to the attached picture forwarding all TCP ports (1-21,23-79,81-442,444-2221,2223-65535). If you're using IPsec, then configure the required IPsec ESP/AH fields.
Port Forwarding is done and all specified inbound traffic will be directed to your end-device!