zbfw vs. cbac

[mialbert]

Is zbfw more secure than cbac.  been doing cbac but have been thinking about a general switch to zbfw for isr's.  Is it worth switching to zbfw over cbac for any reason. 

[alejands]

ZBF is more complete and flexible.

It also depends on the IOS of your Router.

Zone-Based Firewall is CBAC's replacement.

Here is documentation for it.

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml