All hosts inside this security zone (subnet) will have as gateway the IP address configured on the ASA firewall interface. The Cisco ASA has many physical interfaces which can be further divided into “sub-interfaces” using VLANs.Įach one of these firewall interfaces is connected to a “security zone” which is basically a Layer 3 subnet. Stateful packet inspection checks an access control list to see if the source or destination IP address (and/or ports) of the incoming packet is allowed access to the network or not.
A network firewall is based on Stateful packet inspection, which I will explain below.Ī stateful network firewall, such as the Cisco ASA, typically uses stateful packet inspection to prevent unauthorised traffic from entering the network from the outside or prevent unauthorised traffic from being passed between security zones internally within a network.Ī stateful firewall keeps track of all the sessions that have been initiated from user devices inside the network and allows the responding traffic from outside the network to pass through to the initiating device. Let’s explain briefly what the core network firewall functionality is for the Cisco ASA.
0 kommentar(er)
