topic ASA v Router in Network Security

ASA v Router

ciscoben2009 — Tue, 12 Mar 2019 00:27:39 GMT

Hello everyone

forgive me but i am trying understand the ASA firewalls more i come from a router zone based firewall background but the ASA seem to have less advance firewall?

the ASA seem to reply more on ACLS were the ZBR seems to use the class map for layer 4 inspection

to me the ZBF seems to have been advanced more in the config compared to the ASA

am i missing something ? are the ACLs on a ASA different to the kind on a router do they inspect traffic like the class map?

any info would be great

thanks

Ben

ASA v Router

Julio Carvajal — Sun, 25 Nov 2012 16:54:25 GMT

Hello Ben,

The ACLs are going to be the simple layer 3-4 check but you can use layer 7 inspection in order to perform more advanced and granular inspection with the use of the Modular Policy Framework ( MPF)

Regards

ASA v Router

ciscoben2009 — Sun, 25 Nov 2012 18:13:18 GMT

will the ASA allow return traffic like a class map would on a router?

the ASA sounds almost like the IOS firewall but needs inspection rules to return traffic does the ASA do this the same way?

ASA v Router

Julio Carvajal — Sun, 25 Nov 2012 18:24:50 GMT

Hello Ben,

Yes, it will... That is the whole purpose of a deep packet inspection and stateful firewall as the ASA.

The ASA has already some built-in inspection rules that will allow traffic to return when this traffic is innitiatted on the higher security level interface.

Regards,

ASA v Router

ciscoben2009 — Sun, 25 Nov 2012 19:20:43 GMT

ah i see thats great thanks!