Skip to Content
Cisco Secure Firewall Services Module (FWSM)
book

Cisco Secure Firewall Services Module (FWSM)

by Ray CCIE No. 7050 Blair, Arvind CCIE No. 7016 Durai
August 2008
Intermediate to advanced
528 pages
10h 42m
English
Cisco Press
Content preview from Cisco Secure Firewall Services Module (FWSM)

CHapter 11 Modular Policy

This chapter describes how to use and configure application inspection on the Firewall Services Module (FWSM) with modular policy. The FWSM mechanisms used for stateful application inspection enforce a secure use of services offered in the network.

This chapter covers the following topics:

• Components of modular policy

• Configuration of modular policy

• Understanding application engines

Modular policy is a three-step process: classification, policy map, and service policy.

In the first step, classification, the traffic is assessed and is divided into classes as per user configuration.

In the second step, policy map defines actions on the traffic defined in these classes. The traffic flow is based on the interface. ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance, Second Edition

Cisco ASA: All-in-One Firewall, IPS, Anti-X, and VPN Adaptive Security Appliance, Second Edition

Jazib Frahim - CCIE No. 5459, Omar Santos

Publisher Resources

ISBN: 9781587056093Purchase book