Understanding ZBF.

[simon]

Hello,

I'm using the zone-based policy firewall in my 2610XM running IOS 12.4(11)T. I want to block certain ports outbond. But I also have to inspect tcp and udp. To, the acls are not applied, because als outbound traffic is allowed when I inspect those protocols tcp and udp?

Attached is my running config. I've read the Cisco documentation about ZBF but that's a point which I don't understand. Maybe someone could explain it to me?

edit: I need to edit my incoming acl for vpn traffic. I've tried to allow ipsec traffic only, but it didn't work.

[p.krane]

What is the version of IOS which you are using in the cisco box ?

[simon]

12.4(11)T

[simon]

Is no one using zbf?

[simon]

*push*

[sdniel]

I'm using it, but not sure I understand your question?