Cisco Zone-based FW

[jschweng]

We're considering running Zone-based FW IOS on our border routers which are ASRs. We're used to ASAs with their active/standby feature. Is there an equivalent for ZFW or do we need to rely on OSPF or HSRP?

[Panos Kampanakis]

IOS ZBF doesn't have stateful failover as known from the ASAs. You can find some info here http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5708/ps5710/ps1018/white_paper_using_cisco_ios_zone_based_classic_fw.html

Only interface redundancy can be supported.

I hope it helps.

PK