Routers with multiple integrated features enabled are best suited for branch-office or telecommuter sites where less devices offer a better solution. Application of each additional feature incurs memory and processing costs and will likely contribute to reduced forwarding throughput rates, increased packet latency, and loss of feature capability during periods of peak load if an underpowered integrated router-based solution is deployed.įollow these guidelines when you decide between a router and an appliance: While application of firewall inspection, along with other integrated services in the ISR products, might appear attractive from cost and operational perspective, specific considerations must be evaluated in order to determine if a router-based firewall is appropriate. Typical deployments include Teleworker applications, small- or branch-office sites, and retail applications, where low device count, integration of multiple services, and lower performance and security capability depth is desired. IOS Firewall BackgroundĬisco IOS Firewall is typically deployed in application scenarios that differ from appliance firewalls’ deployment models. Refer to the Cisco Technical Tips Conventions for more information on document conventions. If your network is live, make sure that you understand the potential impact of any command. All of the devices used in this document started with a cleared (default) configuration. The information in this document was created from the devices in a specific lab environment.
Firewall builder for cisco routers software#
This document is not restricted to specific software and hardware versions. There are no specific requirements for this document. Your network may require other configuration for services such as QoS and VPN to maintain voice quality and confidentiality. Each scenario describes the VoIP and security configurations separately, followed by the entire router configuration. Configuration for voice services and firewall are provided for each application scenario.
This document describes design and configuration considerations for firewall security aspects of specific Cisco ISR-based data and voice application scenarios. Although the threat landscape of both private and Internet-connected networks is a very dynamic environment, Cisco IOS Firewall offers stateful inspection and Application Inspection and Control (AIC) capabilities to define and enforce a secure network posture, while enabling business capability and continuity. Cisco Integrated Service Routers (ISRs) offer a scalable platform to address data and voice network requirements for a wide range of applications.
0 kommentar(er)
