Deploying Zone-Based Firewalls

Chapter 5. Advanced Zone-Based Policy Firewall Configuration

<feature><title> </title>

• Tuning the Stateful Inspection 67

• Tuning Denial-of-Service Protection 70

• Identifying Masquerading Applications 74

• Application Layer Packet Inspection 79

• HTTP Packet Inspection 86

• Configuring User-Defined Protocols 90

</feature>

In the previous chapters, you’ve seen the mandatory configuration commands used to configure the zone-based policy firewall feature of Cisco IOS and how they can be used to implement various firewall designs. In this chapter, we focus on optional and advanced topics, including the following:

• Tuning the stateful inspection

• Tuning denial-of-service protection

• Identifying applications masquerading as other well-known applications

• Configuring application ...