CCIE Security Exam Quick Reference Sheets

Chapter 5. Cisco Security Appliances and Applications

Cisco Secure PIX Firewall and Cisco Adaptive Security Appliance Firewall

• A PIX Firewall functions on a connection-based security policy, and logic is based on the Adaptive Security Algorithm (ASA). Every inbound packet is checked against the algorithm and against connection-state information in memory.
• The PIX Firewall supports Network Address Translation (NAT) and Port Address Translation (PAT).
• The outside interface on the PIX is untrusted, and the security level on that interface is set to 0; the inside, or trusted, interface is set to 100 by default.
• nameif hardware_id if_name security_level vlan_id—Names the inside and outside interfaces and assigns the security levels (in global configuration ...