Solved

Zone based firewalls

Posted on 2011-02-18
2
406 Views
Last Modified: 2012-05-11
I am new to the world of firewalls... and going over the ZBFWs. I am not sure what is the motive for creating such a FW, I see am example where the INSIDE and outside are grouped as int zones and the traffic is inspected with policy maps, all within a router. Well, all this could be done with prev int based ACL rules. What is something that is pushing for the need to have ZBFWs.

thanks,
0
Comment
Question by:totaram
2 Comments
 
LVL 6

Accepted Solution

by:
PJBX earned 125 total points
ID: 34931178
I've not used ZBFWs in a production environment, but "supposedly" a ZBF is more robust than simply controlling access.

It allows you to inspect traffic and block any traffic with potentially malicious code. By creating the zones, you can set additional rules based on your group/zones

0
 

Author Comment

by:totaram
ID: 34933310
Good logic, but everything is still within a router, how does it prevent any attacks...
0

Featured Post

Complete Microsoft Windows PC® & Mac Backup

Backup and recovery solutions to protect all your PCs & Mac– on-premises or in remote locations. Acronis backs up entire PC or Mac with patented reliable disk imaging technology and you will be able to restore workstations to a new, dissimilar hardware in minutes.

Join & Write a Comment

If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Nothing in an HTTP request can be trusted, including HTTP headers and form data.  A form token is a tool that can be used to guard against request forgeries (CSRF).  This article shows an improved approach to form tokens, making it more difficult to…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now