Summary

This chapter examined the Cisco IOS Firewall and identified the three main types of IOS Firewall: the Classic IOS Firewall, which is based on CBAC; the IOS HTTP Application Firewall, which extends the Classic IOS Firewall to provide HTTP and IM inspection; and the latest addition to the IOS Firewall product set, the IOS Zone-Based Firewall.

Configuration examples were provided for each of the types of firewall, along with the relevant commands to verify the completed configuration. The next section cover the IOS Intrusion Prevention System (IPS).