CBAC vs. Zone-based firewall

John Blakley · ‎01-16-2009

All,

Which is more preferred, and why? It seems as though the zone-based firewalls allow for more control over what type of traffic is allowed out/in, but is that the case? How many of you are using these?

Thanks,

John

HTH, John *** Please rate all useful posts ***

Edison Ortiz · ‎01-18-2009

Choosing one application over the other depends on the IOS running on the router.

Zone-Based Firewall is CBAC's replacement, please refer to the documentation:

http://www.cisco.com/en/US/products/sw/secursw/ps1018/products_tech_note09186a00808bc994.shtml

HTH,

__

Edison.