topic Best way to deploy ISO firewall feature in Network Security https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813895#M459400 <P>What is the best way to deploy the IOS firewall feature?</P><P></P><P>I have a Cisco 1841 router running 12.4.&nbsp; </P> Mon, 11 Mar 2019 22:29:51 GMT ciscobigcat 2019-03-11T22:29:51Z Best way to deploy ISO firewall feature https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813895#M459400 <P>What is the best way to deploy the IOS firewall feature?</P><P></P><P>I have a Cisco 1841 router running 12.4.&nbsp; </P> Mon, 11 Mar 2019 22:29:51 GMT https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813895#M459400 ciscobigcat 2019-03-11T22:29:51Z Best way to deploy ISO firewall feature https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813896#M459401 <HTML><HEAD></HEAD><BODY><P>Well, if you have featured licensed on your router for ZoneBase firewall then stick with Zone Base, which is more flexible, if there ZoneBase Firewall is not licensed then stick with CBAC.</P><P></P><P>Hope that answers your question.</P><P></P><P>Thanks</P><P>Rizwan Rafeek</P></BODY></HTML> Thu, 16 Feb 2012 20:44:22 GMT https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813896#M459401 rizwanr74 2012-02-16T20:44:22Z Best way to deploy ISO firewall feature https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813897#M459402 <HTML><HEAD></HEAD><BODY><P> Well, I think on the 12.4 versions on those 1841s, so can really enable any of those features as long as you have the enterprise IOS version right?&nbsp; and I also believe that there is no license per se on these platforms.</P><P></P><P>For the new 15 versions I believe you do need the respective licenses to have certain features.</P><P></P><P>Please confirm.</P><P></P><P>Now, with regards to those 2 features, are they 2 totally different features? and if so, what is the difference?</P><P></P><P>What I am trying to accomplish here is simply make an 1841 running 12.4 enterprise behave like a real full stateful inspection engine (firewall). I know that the router CPU is gonna be taxed a bit, but I really needed and the load is not that heavy on this environment.</P><P></P><P>I also have another environment with a 2911 router and we purchased the IOS Firewall feature license. This license enabled us to activate the IP Inspect commands. What is this called? I thought it was only called IOS Firewall feature.</P><P></P><P></P><P>thank you</P></BODY></HTML> Fri, 17 Feb 2012 02:46:06 GMT https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813897#M459402 ciscobigcat 2012-02-17T02:46:06Z Best way to deploy ISO firewall feature https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813898#M459404 <HTML><HEAD></HEAD><BODY><P> "What is this called? I thought it was only called IOS Firewall feature."</P><P></P><P>Yes there is feature called IOS firewall but nobody use it because it is not so flexialbe with applications.</P><P></P><P>So, best bet is CBAC or Zone Firewall.</P><P></P><P>thanks</P><P>Rizwan Rafeek</P></BODY></HTML> Fri, 17 Feb 2012 04:18:27 GMT https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813898#M459404 rizwanr74 2012-02-17T04:18:27Z Best way to deploy ISO firewall feature https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813899#M459406 <HTML><HEAD></HEAD><BODY><P>The "IOS Firewall Feature" is the one that you enable with the IP Inspect command and then apply it to an interface?</P><P></P><P>And are CBAC and Zone Firewall two different things or are they the same thing?</P></BODY></HTML> Sat, 18 Feb 2012 05:09:01 GMT https://community.cisco.com/t5/network-security/best-way-to-deploy-iso-firewall-feature/m-p/1813899#M459406 ciscobigcat 2012-02-18T05:09:01Z