Zone-Based Firewalls (Inside, Outside, DMZ)

Imagen: Permisos predeterminados y Retorno tráfico permitido debido Stateful Filtering

Características especificas de Zone-Based Firewalls
las principales características de ZBF incluyen las siguientes:

■ Stateful inspection.
■ Application inspection.
■ Packet filtering.
■ URL filtering.
■ Transparent firewall (implementation method).
■ Support for virtual routing and forwarding (VRF).
■ Access control lists (ACL) are not required as a filtering method to implement the policy.


Cisco Common Classification Policy Language (C3PL)

■ Class maps: These are used to identify traffic
■ Policy maps: These are the actions that should be taken on the traffic
■ Service policies: This is where you apply the policies