topic Cisco Zone-based FW in Network Security https://community.cisco.com/t5/network-security/cisco-zone-based-fw/m-p/1320859#M771657 <P>We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP? </P> Mon, 11 Mar 2019 16:32:45 GMT jschweng 2019-03-11T16:32:45Z Cisco Zone-based FW https://community.cisco.com/t5/network-security/cisco-zone-based-fw/m-p/1320859#M771657 <P>We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP? </P> Mon, 11 Mar 2019 16:32:45 GMT https://community.cisco.com/t5/network-security/cisco-zone-based-fw/m-p/1320859#M771657 jschweng 2019-03-11T16:32:45Z Re: Cisco Zone-based FW https://community.cisco.com/t5/network-security/cisco-zone-based-fw/m-p/1320860#M771685 <HTML><HEAD></HEAD><BODY><P>IOS ZBF doesn't have stateful failover as known from the ASAs. You can find some info here <A class="jive-link-custom" href="http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/white_paper_using_cisco_ios_zone_based_classic_fw.html" target="_blank">http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/white_paper_using_cisco_ios_zone_based_classic_fw.html</A></P><P></P><P>Only interface redundancy can be supported.</P><P></P><P>I hope it helps.</P><P></P><P>PK</P><P></P></BODY></HTML> Wed, 28 Oct 2009 19:21:04 GMT https://community.cisco.com/t5/network-security/cisco-zone-based-fw/m-p/1320860#M771685 Panos Kampanakis 2009-10-28T19:21:04Z