CBAC Question

[welcomeccie]

Do the IOS Firewall Features on the router enough to use instead of PIX? For example

Can i use the CBAC for large scale Network or i should use PixFirewall?

And if i use the CBAC which router series well be ok for heavy traffic

[dominic.caron]

The ASA or PIX offer more security feature. It will monitor application traffic more closely. CBAC is better for SMB deployment when you have a need for special routing needs.

Given the choice, better go with an ASA. Woull have better protocol support.

[welcomeccie]

I know that the ASA offer more features but i need only to allow some traffic for inbout and outbound .I don't need all the ASA features

[welcomeccie]

What about the Reflexive ACLs ?

[welcomeccie]

Can i use Reflexive ACL on Cat 6500 or cat4500 ?