CCNA Security (640-554) Portable Command Guide

Chapter 12. Configuring Zone-Based Firewalls

This chapter covers the following topics:

Firewall Fundamentals

• Types of Firewalls

Firewall Design

• Firewall Policies

• Firewall Rule Design Guidelines

• Cisco IOS Firewall Evolution

Cisco IOS Zone-Based Policy Firewall

• Cisco Common Classification Policy Language

• Zone-Based Policy Firewall Design Considerations

• Default Policies, Traffic Flows, and Zone Interaction

• Configuring an IOS ZFW

• Configuring an IOS ZFW Using the CLI Example

• Configuring an IOS ZFW Using CCP Example

• Configuring NAT Services for ZFWs Using CCP Example

Firewall Fundamentals

A firewall is a software or hardware system that acts as a barrier between an internal (trusted) network and an external (untrusted) network. ...