PIX Standard Stateful Operation Versus CBAC?

Unanswered Question
Nov 8th, 2007
User Badges:

Correct me if I am wrong, the Cisco Pix by default will only allow packets from the outside to inside if there is an entry for it in it's state table.


Other than CBAC's ability to filter on the application layer via control packets, is there any other differences between CBAC and the default setup of a PIX?


Thanks.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
msosabar Mon, 11/12/2007 - 09:46
User Badges:

PiX Firewall by design is a firewall, (security levels, nat-control, packet inspection at level 7, etc) CBAC does emulate the packet inspection that a PIX Firewall does, here is a link with pretty good information about the CBAC capabilities and the scenarios in which you may use it:

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804a41c5.html#wp1000932

lrm001c474 Fri, 11/16/2007 - 08:49
User Badges:

The link you supplied involves the router IOS based firewall functionality.


Is CBAC only allowed on router based firewalls or are they allowed on PIX's as well?


Thanks.

Actions

This Discussion