887VA Hardening

[esprit1987]

Hi,

Hope you can assist.

I have setup a 887VA with a Client VPN but before deploying onsite, I was wandering how to make it more secure. Other than ACLs I see no firewall configuration "Ip Inpect Command Un recognized"

The datasheet says its supported, am I missing something? My version is below...

Cisco IOS Software, C800 Software (C800-UNIVERSALK9-M), Version 15.7(3)M, RELEASE SOFTWARE (fc1)

[Philip D'Ath]

Check out my tool for generating configs for this router.  It gives a pretty good config.

http://www.ifm.net.nz/cookbooks/800-isr-wizard.html

[esprit1987]

Thanks Phil,

Looks good, but I cannot apply firewall commands so I'm trying to work out what features I do have and what I don't. If there is no firewall I cannot connect to my corperate network...?

[esprit1987]

Turns out my advsecurity license wasn't active. I applied "license comment add advsecurity..." and ip inspect commands came to life.
I will work through the infor you have given. Many thanks.