https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563310#M198112 <P>For IOS Firewall, which is better to inspect on the inside interface or the outside, it appears you can go wither way.</P><P>&nbsp;</P> Tue, 12 Mar 2019 05:18:48 GMT JeffG1 2019-03-12T05:18:48Z https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563310#M198112 <P>For IOS Firewall, which is better to inspect on the inside interface or the outside, it appears you can go wither way.</P><P>&nbsp;</P> Tue, 12 Mar 2019 05:18:48 GMT https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563310#M198112 JeffG1 2019-03-12T05:18:48Z https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563311#M198113 <P>Hi,</P><P>This should help you on this:-</P><P>http://packetlife.net/blog/2009/mar/10/ios-context-based-access-control-cbac/</P><P>Thanks and Regards,</P><P>Vibhor Amrodia</P> Thu, 08 Jan 2015 03:51:11 GMT https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563311#M198113 Vibhor Amrodia 2015-01-08T03:51:11Z https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563312#M198114 <P>I typically configure the outbound inspection on the outside interface in the "out" direction. With that, also the router-generated traffic can be inspected.&nbsp;</P> Thu, 08 Jan 2015 07:27:02 GMT https://community.cisco.com/t5/network-security/inspect-on-the-inside-or-outside-interface/m-p/2563312#M198114 Karsten Iwen 2015-01-08T07:27:02Z