topic Re: Cisco IOS firewall question in Network Security

Cisco IOS firewall question

mohamed_makled — Mon, 11 Mar 2019 14:00:49 GMT

Dear all

our customer has a router 2800 in a branch site , they need to configure the router as a firewall and IPS.

This router is working properly and all the users connect to their applications in the main site through it. If i start to configure the router to be a firewall , is this affecting on the router ???

In other words is this affecting on the routing table of the router ??

If i configure the router to be firewall & IPS during working hours , will this affect on the network or not ???

regards

mohamed

Re: Cisco IOS firewall question

Collin Clark — Tue, 21 Oct 2008 19:20:52 GMT

Configuring the firewall feature will not affect the routing table, however configuring firewall and/or IPS will affect traffic flows. You should certainly wait until off hours to configure.

Re: Cisco IOS firewall question

mohamed_makled — Tue, 21 Oct 2008 19:31:02 GMT

Dear collin

Thanks for your reply .

Re: Cisco IOS firewall question

abinjola — Wed, 22 Oct 2008 07:39:54 GMT

well, the IOS firewall feature doesn't deal with route lookup therefore your routing is not affected, only a tcp/udp session is maintained to create dynamic ACLS for return traffic, so yes your traffic would not be blocked,

Even with IPS configured you are safe and may do the configuration in real time as default action for all the signatures are "ALRERT" and even if a signature is fired , the "concern" traffic is not blocked