
Cisco IOS Firewall Features
777
© 2003, Cisco Systems, Inc. All rights reserved.
• Stateful Firewall Engine – tracks protocol state of
connection
• Support for advanced protocol inspection:
–TCP, UDP, H.323v2, SIP, Skinny, ICMP, etc.
• Denial of Service (DoS) detection and prevention
• Destination URL Policy enforcement (Websense & N2H2)
• Per User Firewalls
–Per user, interface or subinterface security policies
• Per-user authen. and author. for http/https, ftp and telnet
–Tightly integrated with AAA services
• Firewall and Multicast routing co-exist
• Control downloading of Java applets
• Real-time alerts
• Integrated inline IDS functionality!
Commentaires sur ces manuels