Some questions about Routers and Firewalls

[Fahad Wasi]

Hello Sir,
I have some questions about Cisco Routers and Firewalls,

Q.1 I wanted to know that now in the new models of Cisco Firewalls, their are no USB ports? What is the name of the new model of Cisco Firewalls?

Q.2 In Cisco Routers, do we also have built in firewalls?

Q.3 Is PIX an old model of Cisco ASA Firewall which was used before ASA Firewall was launched in the market?

Thanks

[GioGonza · Accepted solution]

Hello @Fahad Wasi, 

A. 1 They come with one USB port and the new models are with an X at the end, now they come with FirePower and they are called Next Generation Firewall. 

A. 2 No, Routers don´t come with a built in FW, they have a feature to simulate a FW that is called Zone Based FW. 

A. 3 Yes, the ASAs replaced the PIX long time ago and yes they are the oldest model some commands changed but the essence of the ASAs is a PIX. 

HTH

Gio

[Fahad Wasi]

Hello Gio Gonze,

Thank you for your reply.

Q.1 So it means that old models of ASA firewalls,didn't had built in USB port but now the new models of ASA firewalls have built in USB ports?

Q.2 Ok, you mean that new models of "Routers"(Aggregated Service Routers), donot have built in FW, but old models of "Routers"(ISR) had built in FW?
Can you also please clarify what do you mean by having a feature which is used to simulating a FW?You mean new models of Routers allow you to see how a FW actually works and is configured by giving a software based environment of a FW?


Q.3 Is it also true that ASA Firewalls have both ,built in IDS(Intrusion Detection System) and IPS(Intrusion Prevention System?

Regards

[GioGonza · Accepted solution]

Hello @Fahad Wasi, 

A.1 Newer and older versions do have the USB port. 

A.2 As far as I know none of the Routers ASR/ISR have built-in FW, they have a feature called Zone Based FW and this is the link on how to integrate this with the Router.

A.3 Yes they do, either way you can have the IPS in a different appliance called FirePOWER. Basically you can have embedded on the ASA that´s why they are called Next Generation FW and as an appliance called FirePOWER. 

HTH

Gio