Hello,

I'm already running these types of access lists. I wondering if there is something in addition to for even more security.

You can run IP inspects on the public interface, but this will cause overhead on your router. If the router is already heavily loaded, then this may not be a good option. In some IOSes, you can use IPS rules also.

--John

Hello John,

ip inspect is the command to apply CBAC we are meaning the same feature.

Hope to help

Giuseppe

i'm going to work on this in my lab to see if this is what i'm looking for.

I'll keep you posted.

Thanks.