Cisco Secure Firewall Services Module (FWSM)

Chapter 8 Access Control Lists

Access control lists (ACL) filter traffic for a function. The function can be to deny or permit the traffic, to classify the traffic for network address translation (NAT), or to set the traffic to a particular queue, based on quality of service (QoS). ACLs are used in Cisco IOS and firewalls to filter traffic.

Security rules to permit or deny networks or any users are defined by an ACL on a Firewall Services Module (FWSM). The FWSM does not allow any traffic unless it is specified (this is regardless of the security domain). Following are the uses of the access list in the FWSM:

• Provides network security rule definition: The rules for one security domain to access the other security domain are described using ...