topic ZBF vs. CBAC? in Network Security https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354062#M307103 <P>I am just getting into my CCNA Security and am learning the differences between ZBF and CBAC and I know there are definately beneifts of this. My company currently uses CBAC implementation on their branch routers probably only because the majority of them have an older IOS that doesn't support ZBF. My question is what kind of overhead is used in comaprison from CBAC to ZBF?</P><P></P><P>I am going through one of our newer routers that I am using as a guinea pig and as I am going through the configuration, I would think that using implemeting ZBF is going to cost more in overhead that it does with a CBAC. I am not too concerned about this with our newer sites because they are all running 2901's and have a pretty good CPU in them currently. What I am concerned about is if I were to upgrade the IOS in our other routers, which are 1841's, that the CPU may not like the ZBF implementation. </P><P></P><P>any thoughts on this would be wonderful! </P><P></P><P>Thanks in advance. </P> Tue, 12 Mar 2019 03:17:59 GMT Jason Spring 2019-03-12T03:17:59Z ZBF vs. CBAC? https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354062#M307103 <P>I am just getting into my CCNA Security and am learning the differences between ZBF and CBAC and I know there are definately beneifts of this. My company currently uses CBAC implementation on their branch routers probably only because the majority of them have an older IOS that doesn't support ZBF. My question is what kind of overhead is used in comaprison from CBAC to ZBF?</P><P></P><P>I am going through one of our newer routers that I am using as a guinea pig and as I am going through the configuration, I would think that using implemeting ZBF is going to cost more in overhead that it does with a CBAC. I am not too concerned about this with our newer sites because they are all running 2901's and have a pretty good CPU in them currently. What I am concerned about is if I were to upgrade the IOS in our other routers, which are 1841's, that the CPU may not like the ZBF implementation. </P><P></P><P>any thoughts on this would be wonderful! </P><P></P><P>Thanks in advance. </P> Tue, 12 Mar 2019 03:17:59 GMT https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354062#M307103 Jason Spring 2019-03-12T03:17:59Z ZBF vs. CBAC? https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354063#M307104 <HTML><HEAD></HEAD><BODY><P>Hello Jason,</P><P></P><P>Being a Ex-Cisco Security Tac Engineer that loved to handle IOS FW issues I can ensure ZBFW is the way to go.</P><P></P><P>Way more flexible in policy configuration, tshoot, etc ,etc.</P><P></P><P>Regarding the CPU ZBFW is not a feature that will take&nbsp; the performance of your router down like the IOS IPS is well known to do <SPAN __jive_emoticon_name="grin" __jive_macro_name="emoticon" class="jive_macro jive_emote" src="https://community.cisco.com/4.5.4/images/emoticons/grin.gif"></SPAN></P><P></P><P>I would actually recommend you to read and investigate about the benefits of one over the other bud. </P><P></P><P>As long as you can run <SPAN style="font-size: 10pt;">12.4(6)T you will be fne.</SPAN></P><P></P><P></P><P>Rate all of the helpful posts!!! <BR /> <BR />Regards, <BR /> <BR />Jcarvaja <BR /> <BR /><SPAN>Follow me on </SPAN><A class="jive-link-external-small" href="http://laguiadelnetworking.com">http://laguiadelnetworking.com</A></P></BODY></HTML> Sun, 15 Dec 2013 05:18:20 GMT https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354063#M307104 Julio Carvajal 2013-12-15T05:18:20Z ZBF vs. CBAC? https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354064#M307105 <HTML><HEAD></HEAD><BODY><P>Julio, </P><P>Thanks for the insight. I am actually going through working on a configuration as we speak and am already running into a couple of dufferent issues that I will probably post in a different post. </P><P></P><P>Thanks for the help, </P></BODY></HTML> Tue, 17 Dec 2013 15:16:56 GMT https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354064#M307105 Jason Spring 2013-12-17T15:16:56Z ZBF vs. CBAC? https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354065#M307106 <HTML><HEAD></HEAD><BODY><P>Hello Jason,</P><P></P><P>Glad to know that I could help,</P><P></P><P>Let me know when you open the discussions so I can help, You can mark this question as answered.</P><P></P><P></P><P>Rate all of the helpful posts!!! <BR /> <BR />Regards, <BR /> <BR />Jcarvaja <BR /> <BR /><SPAN>Follow me on </SPAN><A class="jive-link-external-small" href="http://laguiadelnetworking.com">http://laguiadelnetworking.com</A></P></BODY></HTML> Tue, 17 Dec 2013 17:20:31 GMT https://community.cisco.com/t5/network-security/zbf-vs-cbac/m-p/2354065#M307106 Julio Carvajal 2013-12-17T17:20:31Z