<div>
Those are just different concepts. You do not need two firewalls, no matter which one you prefer.
</div>


jskfan

<div>
Hi, <br />
<br />
here is a good article about it<br />
<br />
<a href="https://www.plixer.com/blog/firewall-netflow/cisco-zone-based-firewall-reporting/" rel="ugc">https://www.plixer.com/blog/firewall-netflow/cisco-zone-based-firewall-reporting/</a><br />
<br />
Thanks and Regards,
</div>


<div>
<div class="content wysiwyg-content">
ASA Firewall vs Router Zone based Firewall<br />
<br />
I would like to know what is the difference between ASA firewall and Zone based firewall configured on the router.<br />
I mean if I have a router that support zone based firewall, then I do not need to have ASA firewall ?<br />
<br />
Thanks
</div>
</div>


ASA Firewall vs Router Zone based Firewall

I would like to know what is the difference between ASA firewall and Zone based firewall configured on the router.
I mean if I have a router that support zone based firewall, then I do not need to have ASA firewall ?

Thanks

ASA Firewall vs Router Zone based Firewall

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.

Routers

Hardware-based firewalls provide more sophisticated protection for inbound and outbound traffic than the simple Windows software firewall or the basic NAT firewalls found in routers. These devices implement techniques such as stateful packet inspection, deep packet inspection, and content filtering; and may include built-in antivirus and anti-malware protection.

Hardware Firewalls

A switch is a device that filters and forwards packets of data between LAN segments. Switches operate at the data link layer or the network layer of the Open Systems Interconnection (OSI) Reference Model and therefore support any packet protocol. LANs that use switches to join segments are called switched LANs or, in the case of Ethernet networks, switched Ethernet LANs. A hub is a connection point for devices in a network. Hubs are commonly used to connect segments of a LAN. A hub contains multiple ports; when a packet arrives at one port, it is copied to the other ports so that all segments of the LAN can see all packets.