cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
650
Views
0
Helpful
3
Replies

firewall supported on ios routers

sarahr202
Level 5
Level 5

Hi everybody.

My book says there are two types of firewall supported on cisci ios routers:

Classic cisco ios firewall

Zone-based policy firewall.

Could any one give me an example of zone-based policy firewall with configurations ?

               

What kind of firewall is supported on Cisco PIX 515E ?      Is it Classic CIsco ios firewall or Zone-based policy firewall ?

thanks and have a great day.

2 Accepted Solutions

Accepted Solutions

Reza Sharifi
Hall of Fame
Hall of Fame

Hi Sarah,

Here is good doc with config example:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a00809492a4.shtml

PIX or the new firewalls called ASA are different.  They are state full firewalls and have their own hardware and software.

They are not IOS based.  ASA is full blown firewall that competes with other vendor's firewall like Juniper SRX.

Here is the datasheet for all different models of ASAs:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Have a nice weekend

HTH

View solution in original post

Hi,

Pixes were the predecessors of ASAs and they both can run FOS which is the software like IOS for routers, of course hardware is different from ASAs.

For ZBF config example : http://packetlife.net/blog/2012/jan/30/ios-zone-based-firewall/

Regards.

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.

View solution in original post

3 Replies 3

Reza Sharifi
Hall of Fame
Hall of Fame

Hi Sarah,

Here is good doc with config example:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_configuration_example09186a00809492a4.shtml

PIX or the new firewalls called ASA are different.  They are state full firewalls and have their own hardware and software.

They are not IOS based.  ASA is full blown firewall that competes with other vendor's firewall like Juniper SRX.

Here is the datasheet for all different models of ASAs:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/product_data_sheet0900aecd802930c5.html

Have a nice weekend

HTH

  Hi Reza         

PIX or the new firewalls called ASA are different

Even Pix is not ios based, does it have its own hardware software as well ?

thanks

Hi,

Pixes were the predecessors of ASAs and they both can run FOS which is the software like IOS for routers, of course hardware is different from ASAs.

For ZBF config example : http://packetlife.net/blog/2012/jan/30/ios-zone-based-firewall/

Regards.

Alain

Don't forget to rate helpful posts.

Don't forget to rate helpful posts.
Review Cisco Networking for a $25 gift card