To choose a router/firewall or a firewall with DMZ
I have the following questions regarding to (Cisco's) router and firewall:
1) There are two kind of firewall:the standalone firewall (hardware) and the firewall embedded in a router (software based). Is the cml (command line coding system) same for both kind of firewalls? For example, can both use these statements?:
Re: To choose a router/firewall or a firewall with DMZ
AFAIK the seperate standalone firewall and the FW ios code available with the router is similar in few ways but if you are security concerned or security oriented then would suggest for a standalone F/W like PIX or something inline with that.
The CLI again differs on both firewalls and ios firewall(which is in the router).
Nat support is there in both the devices but the CLI used to configure them are different.
And in Firewall by default alll ports are closed and u need to open them up the reqd ports using the cli available in the firewall but its not the case in routers you need to block the unecessary ports and permit the reqd ports coz all the ports are open up.
and again performance wise as well its standalone F/W which can be a best bet for your situation.
As far as DMZ support in Firewalls you can better check out something inline with 515E or above which can support more ports wherein you can configure different ports/zone with different security levels.
Question We run asr9001 with XR 6.1.3, and we have a very long delay to
login w/ SSH 1 or 2 to the device compare to IOS device. After
investigation, the there is 1s delay between the client KEXDH_INIT and
the server (XR) KEXDH_REPLY. After debug ssh serv...
Introduction The purpose of this document is to demonstrate the Open
Shortest Path First (OSPF) behavior when the V-bit (Virtual-link bit) is
present in a non-backbone area. The V-bit is signaled in Type-1 LSA only
if the router is the endpoint of one or ...
Hi, I am seeing quite a few issues with patch install and wanted to
share my experience and workaround to this. Login to admin via CLI, then
access root with the “shell” command Issue “df –h” and you’ll probably
see the following directory full or nearly ...