I'm studying CCNA and i've just learnt about Reflexive ACL's. Just wondering how secure or insecure it would be to use an ACL in place of a firewall.
This was a LAB router that I would like to set up as my home internet gateway.
Add a comment
|
1 Answer
Yes, you can use a reflexive ACL but it couldn't possibly be as secure as a stateful inspection firewall. Since you are studying for the CCNA, you should build the lab network like real customers do. IOS has a real stateful inspection fw; I would use that.
answered Jun 26, 2013 at 12:02
-
Thank you, I didn't realise that was in all IOS images. Commented Jun 26, 2013 at 12:13
-
-
3@Mokilok it isnt in every IOS images - you need to use the feature navigator to check as Mike is referencing to.– knotsehCommented Jun 26, 2013 at 13:52
-
My image is c1841-ipbase-mz.124-3i.bin I'm guessing that since it's ipbase I don't have access to the firewall. Commented Jun 28, 2013 at 10:05
-
Correct, in most cases you will require AdvIPservices IOS to utilise the IP Inspect features. It is very powerful, don't forget by default it hates Java - cisco.com/en/US/docs/ios-xml/ios/sec_data_cbac_fw/configuration/…– BrianKCommented Jul 1, 2013 at 0:46