IOS Zone-based Policy Firewall questions

ovt · ‎07-11-2007

1. Why doesn't "drop log" policy-map action send unreachables? Is this a bug or feature?

2. Why doesn't ZPF control multicasts terminated at the self zone (EIGRP, for example), so it is not possible to control which multicasts are accepted and which aren't. Is this a bug or feature?

3. Why is SMTP guard enabled by default and cannot be disabled if "match protocol smtp" is used? Is this a bug or feature?

4. Does cisco have performance metrics for ZPF compared to traditional CBAC?

IOS 12.4(15)T

Thx.

Report Inappropriate Content · ‎07-18-2007

Refer to the zone based frewall feature page for more information

http://cisco.com/en/US/products/hw/routers/ps341/products_data_sheet0900aecd802c8530.html

juan_m_12 · ‎02-26-2008

i have the same problem with the SMTP being blocked,

have you found a way to make it work??