In comparison with stateless packet filters, ![]() Requires additional feature license which is not part of any technology For example, at the time of writing ASR1000 The first software version with ZBFW support is IOS 12.4(6)T, and IOS-XE 16.10.1a.ĭocumentation for the specific platform, as licensing can change and this featureĬan be licensed separately. Policy-maps constructs for classification and policy application.Ĭisco feature navigator ( displays routers, software version and the licensing level required to enable firewall functionality, as shown in the screenshot below. Mainĭifference is that ZBF uses zones with default “deny any” policy, and so calledĬ3PL (Cisco Common Classification Policy Language) with class-maps and It is replacement for olderĬBAC (Context-Based Access Control) – “ip inspect” based configuration.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |