Firewall Blade on CIsco 6500

[bala.kcs]

If I have a firewall Blade on 6500, How do I have the Statefull Inspection enable & implement CBAC functions..

Any URLs or Any PDFs

regards,

KCS Balaji

[tohuang]

Hi,

If you have FWSM on the switch, the fixup protocol is enable by default which has the same function as inspection for CBAC on router.

Thanks

Tony

[bala.kcs]

Thanks for your reply.. As I was on long leave I could not reply. Does FWSM even support Full stateful inspection between the VLANs of the L3 switch by default or we have to enable them..

regards,

KCS Balaji

[yossib]

The Stateful Inspection Algorithm on the FWSM is called ASA, and yes it is enabled by default

you can get more info here http://www.cisco.com/univercd/cc/td/doc/product/iaabu/pix/pix_60/config/intro.htm#xtocid3

[a.lysyuk]

Hello.

You have to specify also which VLAN will be virtually connected to FWSM.

You can do it by entering

a) when you MSFC operates under IOS:

firewall vlan-group

firewall module vlan-group

b) when your MSFC operates under CatOS:

set vlan firewall-vlan