CCSP Self-Study: Securing Cisco IOS Networks (SECUR)

Chapter Summary

The Cisco IOS Firewall feature set is a suite of features for Cisco IOS routers that provides network protection on multiple levels using the following:

• Context-Based Access Control— The Cisco IOS Firewall CBAC engine provides secure, per-application access control across network perimeters. CBAC protects networks by controlling access through a Cisco router and protecting against DoS attacks.

• Authentication proxy— Network administrators can create specific security policies for each user with Cisco IOS Firewall LAN-based, dynamic, per-user authentication and authorization.

• Intrusion detection— Cisco IOS Firewall intrusion detection systems (IDSs) provide a level of protection beyond the firewall by protecting the network from ...