CBAC vs. Zone-based firewall

[John Blakley]

All,

Which is more preferred, and why? It seems as though the zone-based firewalls allow for more control over what type of traffic is allowed out/in, but is that the case? How many of you are using these?

Thanks,

John

[Edison Ortiz]

Choosing one application over the other depends on the IOS running on the router.

Zone-Based Firewall is CBAC's replacement, please refer to the documentation:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml

HTH,

__

Edison.