Inspect on the inside or outside interface?

[JeffG1]

For IOS Firewall, which is better to inspect on the inside interface or the outside, it appears you can go wither way.

[Vibhor Amrodia]

Hi,

This should help you on this:-

http://packetlife.net/blog/2009/mar/10/ios-context-based-access-control-cbac/

Thanks and Regards,

Vibhor Amrodia

[Karsten Iwen]

I typically configure the outbound inspection on the outside interface in the "out" direction. With that, also the router-generated traffic can be inspected.