Cisco Firewalls

Chapter 10. IOS Zone Policy Firewall Overview

This chapter covers the following topics:

• Motivations for the Zone-based Policy Firewall

• Building blocks for Zone-based Firewall policies

• ICMP connection examples

• UDP connection examples

• TCP connection examples

• ZFW and ACLs

• ZFW and NAT

• ZFW in Transparent mode

• Defining connection limits

• Inspection of router traffic

• Intrazone firewall policies in IOS 15.X

“Every gain made by individuals or society is almost instantly taken for granted.” —Aldous Huxley

Chapter 9, “Classic IOS Firewall Overview,” devotes a great deal of attention to the analysis of Context Based Access Control (CBAC), the original implementation of stateful inspection functionality in Cisco IOS.

This chapter ...