Network Security Principles and Practices

Summary

IOS Firewall is a useful tool to have on a router from a security point of view. Although the IOS Firewall provides a fairly adequate amount of firewall security, you should keep in mind the load on the router while implementing this feature on a router. Not only does IOS Firewall's feature set provide basic stateful packet filtering functionality, but it also has a fair number of add-on features, such as application-level protocol awareness and DoS attack detection and prevention.

This chapter concludes our discussion of firewalls. However, later we will revisit some of the access control list techniques and deal with service provider security features. That discussion will complete the discussion of the use of firewalls and filtering ...