topic ACL or IOS firewall? in Network Security https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455034#M718403 <P>If I have ACLs applied on the outside interface and also the IOS firewall feature turned on on a Cisco router, does this make sense? will this be redundant? I guess the question will be what takes priority when there is a request coming in the inbound direction (from the outside world) towards the Outside interface of the router?&nbsp; The IOS firewall feature or the ACLs?</P> Mon, 11 Mar 2019 17:38:49 GMT insccisco 2019-03-11T17:38:49Z ACL or IOS firewall? https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455034#M718403 <P>If I have ACLs applied on the outside interface and also the IOS firewall feature turned on on a Cisco router, does this make sense? will this be redundant? I guess the question will be what takes priority when there is a request coming in the inbound direction (from the outside world) towards the Outside interface of the router?&nbsp; The IOS firewall feature or the ACLs?</P> Mon, 11 Mar 2019 17:38:49 GMT https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455034#M718403 insccisco 2019-03-11T17:38:49Z Re: ACL or IOS firewall? https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455035#M718416 <HTML><HEAD></HEAD><BODY><PRE __jive_macro_name="quote" class="jive_text_macro jive_macro_quote"><P>insccisco wrote:</P><P></P><P>If I have ACLs applied on the outside interface and also the IOS firewall feature turned on on a Cisco router, does this make sense? will this be redundant? I guess the question will be what takes priority when there is a request coming in the inbound direction (from the outside world) towards the Outside interface of the router?&nbsp; The IOS firewall feature or the ACLs?</P></PRE><P></P><P>CBAC happens after acl checks on the outside to interface direction, see this link for full order of operations on IOS router -</P><P></P><P><A href="http://www.cisco.com/en/US/customer/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml">http://www.cisco.com/en/US/customer/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml</A></P><P></P><P>Jon</P></BODY></HTML> Thu, 29 Apr 2010 09:38:44 GMT https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455035#M718416 Jon Marshall 2010-04-29T09:38:44Z Re: ACL or IOS firewall? https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455036#M718433 <HTML><HEAD></HEAD><BODY><P>I was under the impression that the router will first "inspect" the state table.</P><P></P><P>I will take a look at the link now</P></BODY></HTML> Thu, 29 Apr 2010 16:41:36 GMT https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455036#M718433 insccisco 2010-04-29T16:41:36Z Re: ACL or IOS firewall? https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455037#M718459 <HTML><HEAD></HEAD><BODY><P>Let's say the ACL is applied inbound on the outside and the inspection is applied outbound.</P><P>Then for outbound (initiated from inside) traffic the inspection is applied and pinholes are opened in the ACL for the return.</P><P>For traffic initiated from the outside ACL is checked.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P></BODY></HTML> Thu, 29 Apr 2010 22:20:36 GMT https://community.cisco.com/t5/network-security/acl-or-ios-firewall/m-p/1455037#M718459 Panos Kampanakis 2010-04-29T22:20:36Z