PIX Standard Stateful Operation Versus CBAC?

Unanswered Question
Nov 8th, 2007

Correct me if I am wrong, the Cisco Pix by default will only allow packets from the outside to inside if there is an entry for it in it's state table.

Other than CBAC's ability to filter on the application layer via control packets, is there any other differences between CBAC and the default setup of a PIX?

Thanks.

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
msosabar Mon, 11/12/2007 - 09:46

PiX Firewall by design is a firewall, (security levels, nat-control, packet inspection at level 7, etc) CBAC does emulate the packet inspection that a PIX Firewall does, here is a link with pretty good information about the CBAC capabilities and the scenarios in which you may use it:

http://www.cisco.com/en/US/products/ps6350/products_configuration_guide_chapter09186a00804a41c5.html#wp1000932

lrm001c474 Fri, 11/16/2007 - 08:49

The link you supplied involves the router IOS based firewall functionality.

Is CBAC only allowed on router based firewalls or are they allowed on PIX's as well?

Thanks.

Actions

This Discussion