CINXE.COM

<!DOCTYPE html> <html xmlns:fb="//www.facebook.com/2008/fbml" xmlns:og="//opengraphprotocol.org/schema/" lang="en" xml:lang="en" class="no-touch no-js"> <head> <meta charset="utf-8"> <meta name="HandheldFriendly" content="True" /> <meta name="MobileOptimized" content="320" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <meta name="rei" content="3/2/2022 10.39am est" /> <script tyle="text/javascript" src="/content/dam/cdc/j/cdcrSwitch.js"></script> <script type="text/javascript"> if (typeof cdc === "undefined"){ cdc = {}; } cdc.localizedLang="en/us"; if (window.cdcext === undefined) { window.cdcext = {}; } cdcext.customEnvironment = "prod"; if (window.cdclocale === undefined) { window.cdclocale = {}; } cdclocale.locale = cdc.localizedLang=="en/us"?"en_us":cdc.localizedLang; </script> <script src="/c/dam/cdc/t/ctm-core.js"></script> <script> window['adrum-start-time'] = new Date().getTime(); window.environ = "prod" ; </script> <script> if (window.cpe === undefined) { window.cpe = {}; } cpe.accountName = "prod"; cpe.config = ["cinf","dsc","pps"]; cpe.hideMethod = "elements"; window.targetGlobalSettings = JSON.parse('{\x22timeout\x22:4000}'); window.targetPageParamsAll = () => JSON.parse('{\x22entity\x22:\x22{\\\x22id\\\x22:\\\x221540848155687601\\\x22,\\\x22categoryId\\\x22:\\\x22Products,Security,Products Data Sheet\\\x22}\x22}'); const bullseyeLibrary = `/etc.clientlibs/cisco-cdc/clientlibs/clientlib-external/resources/external/bullseye.js`; import(bullseyeLibrary); </script> <script src="/etc.clientlibs/cisco-cdc/clientlibs/clientlib-external/resources/regional-mbox/regional-mbox.js"></script> <title>Cisco IOS Firewall Data Sheet - Cisco</title> <meta name="format-detection" content="telephone=no"> <meta http-equiv="Content-type" content="text/html;charset=UTF-8" /> <meta name="description" content="Read this data sheet to learn the benefits, specifications, and ordering information for the Cisco IOS Firewall. " /> <meta name="title" content="Cisco IOS Firewall Data Sheet" /> <meta name="documentId" content="1473986584057649" /> <meta name="templateName" content="eot" /> <meta name="PID" content="FL37-H=,FR-C6FW" /> <meta property="fb:app_id" content="156494687694418" /> <meta name="ioContentSource" content="WEM" /> <meta name="concept" content="Cisco IOS Firewall" /> <meta name="docType" content="Products Data Sheet" /> <meta name="iaPath" content="cisco.com#Products#Cisco Products#Security#Network Security#Integrated Threat Control#Cisco IOS Firewall" /> <meta name="contentType" content="cisco.com#US#preSales" /> <meta name="locale" content="US" /> <meta name="language" content="en" /> <meta name="country" content="US" /> <meta name="hub" content="Enterprise Networks" /> <meta name="CCID_Page" content="cc001775" /> <meta name="date" content="Tue Jun 04 06:37:19 PDT 2019" /> <meta name="targetingParameter" content="Cisco IOS Firewall:Products" /> <meta name="accessLevel" content="Customer" /> <meta name="accessLevel" content="Guest" /> <meta name="accessLevel" content="Partner" /> <meta name="entitlementExpression" content="contains( "0,1,2,3,4,7" , $profileField[3] )" /> <meta property="og:site_name" content="Cisco" /> <meta property="og:type" content="website" /> <meta property="og:title" content="Cisco IOS Firewall Data Sheet" /> <meta property="og:description" content="Read this data sheet to learn the benefits, specifications, and ordering information for the Cisco IOS Firewall. " /> <meta property="og:image" content="https://www.cisco.com/web/fw/i/logo-open-graph.gif" /> <meta property="og:url" content="https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html" /> <link rel="canonical" href="https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html"/> <script src="/etc.clientlibs/clientlibs/granite/jquery.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/utils.min.js"></script> <script src="/etc.clientlibs/clientlibs/granite/jquery/granite.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/jquery.min.js"></script> <script src="/etc.clientlibs/foundation/clientlibs/shared.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/underscore.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/personalization/kernel.min.js"></script> <script src="/etc.clientlibs/cq/personalization/clientlib/personalization/kernel.min.js"></script> <script type="text/javascript"> $CQ(function() { CQ_Analytics.SegmentMgr.loadSegments("\/etc\/segmentation"); CQ_Analytics.ClientContextUtils.init("\/c\/dnc\/etc\/clientcontext\/default", "\/content\/en\/us\/products\/collateral\/security\/ios\u002Dfirewall\/product_data_sheet09186a0080117962"); }); </script> <link rel="stylesheet" href="/etc/designs/cdc/clientlibs/responsive/css/cisco-sans.min.css" type="text/css"> <script src="/etc/designs/cdc/clientlibs/responsive/js/foundation.min.js"></script> <link rel="stylesheet" href="/etc/designs/cdc/fw/b/responsive/css/eot.min.css" type="text/css"> <script> sessionStorage.setItem("logOutIntermediateMessage", 'You are being logged out.'); </script>  <script type="application/ld+json"> [ { "@context": "http://schema.org", "@type":"ProductModel", "name":"Cisco IOS Firewall", "description":"Read this data sheet to learn the benefits, specifications, and ordering information for the Cisco IOS Firewall. ", "url":"https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html" }, { "@context": "http://www.schema.org", "@type": "WebPage", "name": "Cisco IOS Firewall Data Sheet", "url": "https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html", "description": "Read this data sheet to learn the benefits, specifications, and ordering information for the Cisco IOS Firewall. ", "publisher": { "@type": "Corporation", "name": "Cisco" } }] </script>    <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="GKZXC-NS3SU-A7VFH-HKBHM-U7LKH",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"GKZXC-NS3SU-A7VFH-HKBHM-U7LKH";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="bdpnbeqxgy4r2z557hha-f-8ede3559a-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"61004","ak.ai":parseInt("271834",10),"ak.ol":"0","ak.cr":4,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"15a7e4c","ak.r":37669,"ak.a2":n,"ak.m":"dsca","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":48374,"ak.gh":"23.53.33.212","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1740503502","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==wku4bX7yKQK/O7oTKyI5jmSfV+/niVGwdVXbXR8Y7cTJ06zc+IECMZG32wZGfZJaGRf3RDA6qMnTSLjSg+2W4BocE+cOfz7HQgg65st05CKbnd7Y4RjDeHIGD4ZZqvuFW2dyTPQVqdD+Zg+dXdky8PLIX7XRp6AdCVyVTPr+bFeyFRkuC3goJAugou1CqGtOl5HRekFZqAeE29W42s2pEgENIS3dQRwqMo+S+5gyF1lu7lWKz+nLARLIalDCLcd4Rcu1McO53Hj2XPCQnxRNi7wbRTFgC7YZkNje7Uigy3tgzaFioKHnnfM/fv6/NSEbYn5JlHUqEVyY9cdPpfzmTMmKy1gZn90MrUz1zyGvY1zPLJ0YvOtCUczMH8VG1GwV12fG36w586HhrKZDGXNhIbq3PUlNTnO+7FhQUYnHDNM=","ak.pv":"521","ak.dpoabenc":"","ak.tf":i};if(""!==t)o["ak.ruds"]=t;var r={i:!1,av:function(n){var t="http.initiator";if(n&&(!n[t]||"spa_hard"===n[t]))o["ak.feo"]=void 0!==e.aFeoApplied?1:0,BOOMR.addVar(o)},rv:function(){var e=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(e)}};BOOMR.plugins.AK={akVars:o,akDNSPreFetchDomain:a,init:function(){if(!r.i){var e=BOOMR.subscribe;e("before_beacon",r.av,null,null),e("onbeacon",r.rv,null,null),r.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body id="wcq" class="fw-res cdc-support cdc-eot cdc-high-density cdc-full-width cdc-transform "> <div id="fw-skiplinks"> <ul class="container"> <li><a id="skiplink-content" href="#fw-content">Skip to content</a></li> <li><a id="skiplink-search" href="#">Skip to search</a></li> <li><a id="skiplink-footer" href="#fw-footer-v2" class="last">Skip to footer</a></li> </ul> </div> <script type="module" src="/site/web-components/us/en/cdc-header.js"></script> <cdc-header></cdc-header> <nav class="fw-c-header__seo-links" aria-hidden="true" style="display:none"> <ul> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/index.html">Cisco.com Worldwide</a></li> <li><a tabindex="-1" href="/c/en/us/products/index.html">Products and Services</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/solutions/index.html">Solutions</a></li> <li><a tabindex="-1" href="/c/en/us/support/index.html">Support</a></li> <li><a tabindex="-1" href="/c/en/us/training-events.html">Learn</a></li> <li><a tabindex="-1" href="//www.cisco.com/c/en/us/about/sitemap.html">Explore Cisco</a></li> <li><a tabindex="-1" href="/c/en/us/buy.html">How to Buy</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/index.html?dtid=odicdc001129">Partners Home</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/cisco-partner-program/index.html?ccid=cc000864&dtid=odiprc001129">Partner Program</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/support-help/index.html">Support</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/tools/index.html?dtid=odiprc001129">Tools</a></li> <li><a tabindex="-1" href="https://locatr.cloudapps.cisco.com/WWChannels/LOCATR/pf/index.jsp#/">Find a Cisco Partner</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/connect-with-a-partner/index.html?ccid=cc000864&dtid=odiprc001129">Meet our Partners</a></li> <li><a tabindex="-1" href="https://www.cisco.com/site/us/en/partners/index.html?dtid=odicdc001129">Become a Cisco Partner</a></li> </ul> </nav> <div id="fw-content" class="container grid"> <div class="row full blowout" data-owner="ID"> <div class="col full "> <nav id="fw-breadcrumb" class="data-based" aria-label="breadcrumbs" data-owner="ID"> <ul itemscope itemtype="//schema.org/BreadcrumbList"> <li aria-hidden="true"><a href='#' class="skip"><span></span></a></li> <li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/products/index.html'><span itemprop='name'>Products & Services</span><meta itemprop='position' content='1' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/products/security/index.html'><span itemprop='name'>Security</span><meta itemprop='position' content='2' /></a><span class='caret'></span></li><li itemprop='itemListElement' itemscope itemtype='//schema.org/ListItem'><a itemprop='item' href='/c/en/us/products/security/ios-firewall/datasheet-listing.html'><span itemprop='name'>Data Sheets</span><meta itemprop='position' content='3' /></a><span class='caret'></span></li> </ul> </nav> <script> if (window.cdc === undefined) { window.cdc = {}; } if (cdc.breadcrumb === undefined) { cdc.breadcrumb = (function () { let clone = document.querySelector('#fw-breadcrumb').cloneNode(true); let appendClone = function () { let hasBreadcrumb = document.querySelector('#fw-breadcrumb') !== null, firstMarquee = document.querySelectorAll('.dmc-mq')[0]; if (!hasBreadcrumb && firstMarquee !== undefined) { firstMarquee.querySelector('.frame .inset').insertBefore(this.clone, firstMarquee.querySelector('.frame .inset').firstElementChild); } }; return { clone: clone, appendClone: appendClone } }()); } //DE380224 var anchorChild = document.getElementsByTagName("a"); for(var i=0; i<anchorChild.length; i++){ if(anchorChild[i].getAttribute("itemprop")=="item") { if ( anchorChild[i].href.includes("%3Clocale%3E") ){ let anchorChildHREF = anchorChild[i].href; let docLocale = document.querySelector('meta[name="locale"]').getAttribute('content'); let docLanguage = document.querySelector('meta[name="language"]').getAttribute('content'); var docSeparator; if ((docLocale.toLowerCase() == "us") && (docLanguage.toLowerCase() == "en")) { docSeparator="/"; } else { docSeparator="_"; } let anchorURLReplace = docLanguage.toLowerCase() + docSeparator + docLocale.toLowerCase(); anchorChildHREF = anchorChildHREF.replace("%3Clocale%3E", anchorURLReplace); anchorChild[i].setAttribute('href', anchorChildHREF); } } } </script> <h1 id="fw-pagetitle" class="" data-owner="ID">Cisco IOS Firewall Data Sheet</h1> </div> </div>  <div class="row blowout wide-narrow-v2 visitedlinks"> <div class="col wide-v2"> <script> if (typeof(cdc) == "undefined") cdc={}; if (typeof(cdc.translations) == "undefined") cdc.translations={}; </script> <div class="docHeaderComponent base-blowout"> <div class="linksRow"> <div class="toolbar"> <div class="noprint" id="saveModule"> <script type="text/javascript"> cdc.util.ensureNamespace("cdc.rc.savedoc"); cdc.rc.savedoc.isLoggedIn = false; cdc.rc.savedoc.save = "Save"; cdc.rc.savedoc.saved = "Saved"; </script> <button class="save" aria-expanded="false" aria-label="Save"> <label>Save</label> </button> </div> <div class="saveDocumentMessage login cdc-expandPanel" role="region" aria-live="polite"> <a href="/c/login/index.html?referer=/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html">Log in</a> to Save Content </div>   <div class="noprint downloadDocument"><button type="button" class="view-download-list-link anchor" aria-expanded="false"><div class="toolbarIcon downloadIcon"></div><label class="iconLabel">Download</label></button></div> <div class="noprint printDocument js-only"><button type="button" class="anchor printPage" aria-label="Print"><div class="toolbarIcon printIcon"></div><label class="iconLabel">Print</label></button></div> </div> </div>  <script language="javascript"> cdc.translations.map = "{en-us=https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html, x-default=https://www.cisco.com/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.html}";//storing the map for use in the JS cdc.translations.locale="en_us"; </script> <div class="availableLanguagesList"> <h3>Available Languages</h3> <ul id="translationsList"> </ul> </div> <div id="download-list-container" class="noprint panelRow" role="region" aria-live="polite"> <div class='download-list' aria-label="Download Options"> <h3>Download Options</h3> <ul> <li> <div class="fileText"> <a href="/c/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.pdf" class="download-pdf"><div class="fileIcon pdfIcon"></div>PDF</a> <span class="docSize">(297.8 KB)</span> <br /> <span class="description">View with Adobe Reader on a variety of devices</span> </div> </li> </ul> </div> </div> <div class="infobarClearFix"> <div class="infobar"> <div class="updatedDate"><span>Updated:</span>March 8, 2012</div> <div class="documentId"><span>Document ID:</span>1473986584057649</div> </div> <div class="disclaimers marketing"> <div class="disclaimerButtons"> <div class="aboutBias"> <button aria-expanded="false" >Bias-Free Language</button> </div> </div> <div class="biasfreeContent panel"> <h3>Bias-Free Language</h3> <p>The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. <a href="https://www.cisco.com/c/en/us/about/social-justice/inclusive-language-policy.html">Learn more</a> about how Cisco is using Inclusive Language.</p> </div> </div> </div> </div> <script> jQuery(document).ready(function(){ if(jQuery("body").hasClass("cdc-eot-toc") && jQuery(".cdc-eot-toc").find(".DocumentHistory").length > 0){ jQuery(".cdc-eot-toc .seeRevisions").show(); if(jQuery(window).width() >= 768){ jQuery(".cdc-eot-toc .updatedDate").nextAll(".bullet").show(); } }else{ jQuery(".cdc-eot-toc .infobar .bullet").hide(); jQuery(".cdc-eot-toc .seeRevisions"); jQuery(".cdc-eot-toc .updatedDate"); } }) </script> <script src="/etc/designs/cdc/fw/clientlibs/granite-utils.min.js"></script> <script> if (window.cdc === "undefined") window.cdc={}; if (typeof cdc.rc === "undefined") cdc.rc={}; // initialize dictionary for i18n cdc.util.ensureNamespace("cdc.rc"); cdc.rc.eotkeys = { showOnly5Products : "Show Only 5 Products", showAllRowsProducts : "Show All nRows Products", supportCommunityUrl : "https://community.cisco.com/t5/technology-and-support/ct-p/technology-support", supportCommunity : "Cisco Community", thankYou : "Thank You", viewersAlso : "Customers Also Viewed", show : "Show", more : "More", showOnly3Documents: "Show Only 3 Documents" }; </script> <link rel="stylesheet" href="/etc/designs/cdc/dmr/mbox/mbox.min.css" type="text/css"> <div data-version="DM:components/dgbanner/banner-mbox:V1.5.1"> <div class="mboxDefault"></div> <script type="text/javascript"> var test=""; if(test!=undefined && test.trim().length>0){ mboxCreate('en-us_dg_large_eot','type=default',''); }else{ mboxCreate('en-us_dg_large_eot','type=default'); } </script> </div> <div id="eot-doc-wrapper"> <html> <head> <meta http-equiv="Content-Type" content="text/html; charset=utf-8" /> <script>!function(e){var n="https://s.go-mpulse.net/boomerang/";if("False"=="True")e.BOOMR_config=e.BOOMR_config||{},e.BOOMR_config.PageParams=e.BOOMR_config.PageParams||{},e.BOOMR_config.PageParams.pci=!0,n="https://s2.go-mpulse.net/boomerang/";if(window.BOOMR_API_key="GKZXC-NS3SU-A7VFH-HKBHM-U7LKH",function(){function e(){if(!o){var e=document.createElement("script");e.id="boomr-scr-as",e.src=window.BOOMR.url,e.async=!0,i.parentNode.appendChild(e),o=!0}}function t(e){o=!0;var n,t,a,r,d=document,O=window;if(window.BOOMR.snippetMethod=e?"if":"i",t=function(e,n){var t=d.createElement("script");t.id=n||"boomr-if-as",t.src=window.BOOMR.url,BOOMR_lstart=(new Date).getTime(),e=e||d.body,e.appendChild(t)},!window.addEventListener&&window.attachEvent&&navigator.userAgent.match(/MSIE [67]\./))return window.BOOMR.snippetMethod="s",void t(i.parentNode,"boomr-async");a=document.createElement("IFRAME"),a.src="about:blank",a.title="",a.role="presentation",a.loading="eager",r=(a.frameElement||a).style,r.width=0,r.height=0,r.border=0,r.display="none",i.parentNode.appendChild(a);try{O=a.contentWindow,d=O.document.open()}catch(_){n=document.domain,a.src="javascript:var d=document.open();d.domain='"+n+"';void(0);",O=a.contentWindow,d=O.document.open()}if(n)d._boomrl=function(){this.domain=n,t()},d.write("<bo"+"dy onload='document._boomrl();'>");else if(O._boomrl=function(){t()},O.addEventListener)O.addEventListener("load",O._boomrl,!1);else if(O.attachEvent)O.attachEvent("onload",O._boomrl);d.close()}function a(e){window.BOOMR_onload=e&&e.timeStamp||(new Date).getTime()}if(!window.BOOMR||!window.BOOMR.version&&!window.BOOMR.snippetExecuted){window.BOOMR=window.BOOMR||{},window.BOOMR.snippetStart=(new Date).getTime(),window.BOOMR.snippetExecuted=!0,window.BOOMR.snippetVersion=12,window.BOOMR.url=n+"GKZXC-NS3SU-A7VFH-HKBHM-U7LKH";var i=document.currentScript||document.getElementsByTagName("script")[0],o=!1,r=document.createElement("link");if(r.relList&&"function"==typeof r.relList.supports&&r.relList.supports("preload")&&"as"in r)window.BOOMR.snippetMethod="p",r.href=window.BOOMR.url,r.rel="preload",r.as="script",r.addEventListener("load",e),r.addEventListener("error",function(){t(!0)}),setTimeout(function(){if(!o)t(!0)},3e3),BOOMR_lstart=(new Date).getTime(),i.parentNode.appendChild(r);else t(!1);if(window.addEventListener)window.addEventListener("load",a,!1);else if(window.attachEvent)window.attachEvent("onload",a)}}(),"".length>0)if(e&&"performance"in e&&e.performance&&"function"==typeof e.performance.setResourceTimingBufferSize)e.performance.setResourceTimingBufferSize();!function(){if(BOOMR=e.BOOMR||{},BOOMR.plugins=BOOMR.plugins||{},!BOOMR.plugins.AK){var n=""=="true"?1:0,t="",a="bdpnbeqxgy4r2z557hha-f-8ede3559a-clientnsv4-s.akamaihd.net",i="false"=="true"?2:1,o={"ak.v":"39","ak.cp":"61004","ak.ai":parseInt("271834",10),"ak.ol":"0","ak.cr":4,"ak.ipv":4,"ak.proto":"http/1.1","ak.rid":"15a7e4c","ak.r":37669,"ak.a2":n,"ak.m":"dsca","ak.n":"essl","ak.bpcip":"8.222.208.0","ak.cport":48374,"ak.gh":"23.53.33.212","ak.quicv":"","ak.tlsv":"tls1.2","ak.0rtt":"","ak.0rtt.ed":"","ak.csrc":"-","ak.acc":"reno","ak.t":"1740503502","ak.ak":"hOBiQwZUYzCg5VSAfCLimQ==wku4bX7yKQK/O7oTKyI5jmSfV+/niVGwdVXbXR8Y7cTJ06zc+IECMZG32wZGfZJaGRf3RDA6qMnTSLjSg+2W4BocE+cOfz7HQgg65st05CKbnd7Y4RjDeHIGD4ZZqvuFW2dyTPQVqdD+Zg+dXdky8PLIX7XRp6AdCVyVTPr+bFeyFRkuC3goJAugou1CqGtOl5HRekFZqAeE29W42s2pEgENIS3dQRwqMo+S+5gyF1lu7lWKz+nLARLIalDCLcd4Rcu1McO53Hj2XPCQnxRNi7wbRTFgC7YZkNje7Uigy3tgzaFioKHnnfM/fv6/NSEbYn5JlHUqEVyY9cdPpfzmTMmKy1gZn90MrUz1zyGvY1zPLJ0YvOtCUczMH8VG1GwV12fG36w586HhrKZDGXNhIbq3PUlNTnO+7FhQUYnHDNM=","ak.pv":"521","ak.dpoabenc":"","ak.tf":i};if(""!==t)o["ak.ruds"]=t;var r={i:!1,av:function(n){var t="http.initiator";if(n&&(!n[t]||"spa_hard"===n[t]))o["ak.feo"]=void 0!==e.aFeoApplied?1:0,BOOMR.addVar(o)},rv:function(){var e=["ak.bpcip","ak.cport","ak.cr","ak.csrc","ak.gh","ak.ipv","ak.m","ak.n","ak.ol","ak.proto","ak.quicv","ak.tlsv","ak.0rtt","ak.0rtt.ed","ak.r","ak.acc","ak.t","ak.tf"];BOOMR.removeVar(e)}};BOOMR.plugins.AK={akVars:o,akDNSPreFetchDomain:a,init:function(){if(!r.i){var e=BOOMR.subscribe;e("before_beacon",r.av,null,null),e("onbeacon",r.rv,null,null),r.i=!0}return this},is_complete:function(){return!0}}}}()}(window);</script></head> <body> <code><script language="JavaScript" src="//www.cisco.com/cdc_content_elements/home_page/sniffer/sniffLib-100.js"></script> <script type="text/javascript">sniffIncCSSForMozilla('/web/fw/c/cdcDhNs.css'); sniffIncCSSForUnix('/web/fw/c/cdcDhUnix.css');</script> <link rel="stylesheet" href="dcmt.css"/> <link rel="stylesheet" href="/web/fw/c/dcmt.css"/></code>   <a name="wp9000190"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Networks are exposed to an increasingly hostile environment when connected to the public Internet and private WAN. This can introduce security breaches, malware outbreaks, and unwanted application traffic, which can result in lost revenues, productivity, and damage to corporate reputation. </div> <a name="wp9000191"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Today there is increased pressure to comply with industry regulations as well as state and federal regulations, created to enhance privacy, national security, and in many cases corporate accountability. Examples of these regulations include the Payment Card Industries (PCI) Data Security Standard, which affects all vendors who receive, store, or transmit cardholder data. In the United States, other examples include the Health Insurance Portability and Accountability Act (HIPAA) in the healthcare industry, the Gramm Leach Bliley Act (GLBA) in the financial services industry, and the Sarbanes-Oxley Act in the accounting field. The European Union's privacy legislation, called the Directive on Data Protection, requires that transfers of personal data to non-EU countries take place with only those organizations that provide acceptable levels of privacy protection. Fines, penalties, and lawsuits are just some of what a company might undergo if a security breach occurs and the company is out of compliance. </div> <a name="wp9000192"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Cisco IOS <span style="font-style: normal; font-weight: normal; vertical-align: super" class="cCMTDefault">®</span> Firewall offers the threat defense required for today's changing threat environment. With more dangerous targeted attacks and the growth of the mobile workforce, the perception of network borders and where the office starts and stops has changed significantly to anywhere there is connectivity. </div> <a name="wp9000193"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Deployed extensively at branch locations and home offices, Cisco IOS Firewall provides broad security coverage with deployment flexibility and the cost benefits that are fundamental to an integrated security approach (Figure 1). </div> <a name="wp9000194"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> It is the simple-to-use, certified, cost-effective firewall solution. </div> <a name="wp9000195"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 12pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pFigureCaptionCMT"> <b>Figure 1. </b>Typical Cisco IOS Firewall Deployment </p> <a name="wp9000196"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> <img src="/c/dam/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.doc/_jcr_content/renditions/product_data_sheet09186a0080117962-1.jpg" height="215" width="576" id="wp3000001" border="0" hspace="0" vspace="0"/> </div> <a name="wp9000197"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Cisco IOS Firewall runs on the Cisco <span style="font-style: normal; font-weight: normal; vertical-align: super" class="cCMTDefault">®</span> integrated services router at the branch office and head office, protecting branch office resources and segmenting the network with security zone policies. </div> <a name="wp9000198"> </a> <p style="font-size: 10pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead1CMT"> Cisco IOS Firewall Features and Benefits </p> <a name="wp9000199"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> The Cisco IOS Firewall is Common Criteria EAL4 certified and provides the following benefits: </div> <a name="wp9000200"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • <span style="font-style: normal; font-weight: bold" class="cCMTDefault">Application protection:</span> Block unwanted applications such as instant messaging traffic, peer-to-peer file-sharing traffic, and HTTP-tunneling applications to reduce bandwidth usage and increase employee productivity. </p> <a name="wp9000201"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • <span style="font-style: normal; font-weight: bold" class="cCMTDefault">Network border enforcement:</span> Recommended at all network entry points, secure the "front line," and prevent illegal access to sensitive resources. </p> <a name="wp9000202"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • <span style="font-style: normal; font-weight: bold" class="cCMTDefault">Unmatched return on investment:</span> Perform routing, perimeter security, intrusion detection, VPN functionality, and per-user authentication and authorization on your router while addressing regulatory compliance. </p> <a name="wp9000203"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • <span style="font-style: normal; font-weight: bold" class="cCMTDefault">Easy provisioning and management:</span> Enable rapid deployment of Cisco Technical Assistance Center (TAC)-approved firewall policies, monitor firewall activity, and dynamically configure mitigation policies with Cisco Configuration Professional, the Unified Firewall MIB, and Cisco Security Manager. </p> <a name="wp9000205"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Table 1 describes Cisco IOS Firewall features. </div> <a name="wp9000206"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 1. </b>Feature and Benefits </p> <a name="wp9000207"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000001table4000001"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000001"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Feature </p> </td> <td><a name="wp9000002"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Benefit </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000003"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Network zone segmentation </p> <a name="wp9000004"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> PCI Requirement 3: Protect stored cardholder data </p> </td> <td><a name="wp9000005"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Precise zone segmentation capabilities facilitate deploying security for internal, external and DMZ subgroups on the network to prevent unauthorized access. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000006"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Management options and flexibility </p> </td> <td><a name="wp9000007"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Enable management access from Cisco Configuration Professional, Cisco Security Manager, Unified Firewall MIB, and audit trail and logging. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000008"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Application traffic rate and session control </p> </td> <td><a name="wp9000009"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Policy-map policing applies rate limits to firewall policies to control network bandwidth usage. Session policing limits connection rates to network hosts and helps protect against denial-of-service (DoS) attacks. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000010"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> High availability* </p> </td> <td><a name="wp9000011"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Stateful Failover provides for active and standby failover between two routers for most TCP-based services. Firewall session state is maintained such that active sessions continue even during a router or circuit failure. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000012"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Virtual (VRF-aware) firewall </p> </td> <td><a name="wp9000013"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> VRF-aware firewall functions offer virtual firewalls for isolated route space and overlapping addresses. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000014"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Authentication proxy PCI </p> <a name="wp9000015"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Requirement 10: Track and monitor all access to network resources and cardholder data </p> </td> <td><a name="wp9000016"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Network administrators can authenticate and authorize each user's access to network resources with Cisco IOS Firewall Authentication Proxy using HTTP, Telnet, FTP, and HTTPS interfaces. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000017"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Transparent firewall </p> </td> <td><a name="wp9000018"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> A transparent firewall facilitates insertion of a stateful Layer 2 firewall within an existing network, without readdressing statically defined devices. It provides the same Layer 3-7 filtering as "routed" mode, but offers the simplicity of bump-in-the-wire deployment. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000019"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Policy-map policing and session control </p> </td> <td><a name="wp9000020"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Policy-map policing applies rate limits to firewall policies to control network bandwidth usage. Session policing limits connection rates to network hosts and helps protect against DoS attacks. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000021"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Instant messenger blocking </p> </td> <td><a name="wp9000022"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Instant messenger blocking offers per-service control to block or allow MSN Messenger, Yahoo! Messenger, Windows Messenger and AOL Instant Messenger. It allows service restriction to text-chat only, blocking voice and video chat, and file transfer. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000023"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Peer-to-peer control </p> </td> <td><a name="wp9000024"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Peer-to-peer control individually blocks access to BitTorrent, Gnutella, KaZaA, and eDonkey file-sharing networks. Service-specific improvements were introduced in Cisco IOS Software Release 12.4(9)T to limit certain activities supported by certain peer-to-peer networks. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000025"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Protocol conformance checking </p> </td> <td><a name="wp9000026"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> This feature enforces protocol conformance for HTTP, Simple Mail Transfer Protocol (SMTP), Extended SMTP (ESMTP), Internet Mail Access Protocol (IMAP), and Post Office Protocol 3 (POP3). It facilitates detection and prevention of unwanted traffic on desired application service ports. HTTP inspection offers Java applet filtering to block malicious content in HTTP traffic. Cisco IOS Software Release 12.4(9)T introduced capabilities to configure regular expression matching for policy enforcement, as well as a granular application inspection and control of various HTTP objects, such as HTTP methods, URLs and URIs, and header names; and values such as maximum URI length, maximum header length, maximum number of headers, maximum header-line length, non-ASCII headers, or duplicate header fields. This feature allows you to limit buffer overflows, HTTP header vulnerabilities, binary or non-ASCII character injections, and exploits such as Structured Query Language (SQL) injection, cross-site scripting, and worm attacks. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000027"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Integrates with Cisco IOS Software Intrusion Prevention System (IPS) </p> <a name="wp9000028"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> PCI Requirement 6: Develop and maintain secure systems and applications </p> </td> <td><a name="wp9000029"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Prevent application level attacks from flooding the network. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000030"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Integrates with Cisco IOS Software Content Filtering </p> </td> <td><a name="wp9000031"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Controls and blocks access to malicious and inappropriate websites. </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000208"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />* Current support for the Cisco 1841 Integrated Services Router, Cisco 2800 and 3800 Series Integrated Services Routers, Cisco 3700 Series Multiservice Access Routers, Cisco 7200 Series Routers, and the Cisco 7301 Router. </div> <a name="wp9000209"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> * Only on Classic IOS Firewall, not Zone Based Policy Firewall. </div> <a name="wp9000210"> </a> <p style="font-size: 10pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead1CMT"> Beyond Data Threats: Securing Unified Communications </p> <a name="wp9000211"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Voice and video are also targets of security attacks. Concerns such as toll fraud remain the same in the unified communications environment as in traditional telephone networks. Today's organizations also face increased regulatory requirements for conversation privacy, message confidentiality, and user and device authentication. Therefore, unified communications strategies must address the security aspects of Sarbanes-Oxley, GLB, HIPAA, PCI Data Security Standard, European Basel II, and other mandates affecting global organizations directly within the unified communications architecture. Integrating security within the underlying infrastructure also thwarts DoS attacks, worms, and other malicious activity that are usually aimed at the data network, but, when successful, have ramifications for the voice network, too. </div> <a name="wp9000212"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Taking a comprehensive, systemic approach, incorporating all unified communications layers, means looking at applications, endpoints, call control, and the network infrastructure. Especially at branch offices, securing unified communications is easy to address because Cisco integrated services routers can incorporate voice as well as security functions, all in the same device. Table 2 describes specific support for securing unified communications. </div> <a name="wp9000213"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 2. </b>Features for Securing Unified Communications </p> <a name="wp9000214"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000032table4000002"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000032"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Feature </p> </td> <td><a name="wp9000033"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Benefit </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000034"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Session Initiation Protocol (SIP) application layer gateway (ALG) Inspection </p> </td> <td><a name="wp9000035"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> SIP ALG inspection provides the ability to prevent unauthorized calls, call hijacking, and other SIP exploits and related DoS attacks. This protection helps ensure protocol conformance and application security, giving more granular control over what policies and security checks to apply to SIP traffic and what messages or users to filter out. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000036"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Voice protocol and media streams inspection support </p> </td> <td><a name="wp9000037"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco IOS Firewall configured with Cisco Communications Manager Express offers granular local inspection support for all voice protocols such as skinny local inspection (Skinny Client Control Protocol [SCCP]), which requires Cisco IOS Software Release 12.4(20)T and higher. Cisco IOS Firewall also supports inspection for media streams such as MS NetMeeting, RealMedia , and MS Netshow. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000038"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> H.323v3 and v4 support </p> </td> <td><a name="wp9000039"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco IOS Firewall supports H.323v3 and v4 such as Annex E, Annex G, and Annex D; it also supports fax and call transfer. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000040"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Instant messaging voice control support </p> </td> <td><a name="wp9000041"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco IOS Firewall supports permit, deny, and alert policies and logging operations within instant messaging, including general text chat, SIP Live Communication Server support, and other services such as file transfers and attachments, white boarding, application sharing, games, video and audio conferencing, URLs, advertisements, tickers, and pop-ups. </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000042"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Trusted firewall control </p> </td> <td><a name="wp9000043"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Trusted firewall control builds intelligence into the firewall so that it can open a pinhole (a port that is opened through a firewall to allow a particular application access to the protected network) dynamically when it receives a Simple Traversal of User Datagram (STUN) Protocol request for a media flow. This request is authenticated/authorized by the firewall to make sure that it opens pinholes only for genuine calls. </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000215"> </a> <p style="font-size: 10pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead1CMT"> Cisco IOS Firewall Management </p> <a name="wp9000216"> </a> <p style="font-size: 9pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead2CMT"> Cisco Configuration Professional </p> <a name="wp9000217"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Cisco Configuration Professional is a GUI device management tool for Cisco integrated services routers and Cisco 7200 Series and 7301 Routers running Cisco IOS Software. It offers smart wizards and advanced configuration support for LAN and WAN interfaces, Network Address Translation (NAT), and stateful and application firewall policy. The firewall wizard allows a single-step deployment of high, medium, or low firewall policy settings. Cisco Configuration Professional also offers a one-click router lockdown and an innovative security auditing capability to check and recommend changes to router configuration based on Cisco TAC recommendations. Figures 2 and 3 provide examples of the UI. </div> <a name="wp9000218"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 12pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pFigureCaptionCMT"> <b>Figure 2. </b>Defining Firewall Policies with Cisco Configuration Professional GUI </p> <a name="wp9000219"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> <img src="/c/dam/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.doc/_jcr_content/renditions/product_data_sheet09186a0080117962-2.jpg" height="384" width="511" id="wp3000002" border="0" hspace="0" vspace="0"/> </div> <a name="wp9000220"> </a> <p style="font-size: 9pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead2CMT"> Cisco Security Manager </p> <a name="wp9000221"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Cisco Security Manager is an enterprise-class management application that is Cisco device-independent designed to configure firewall, VPN, and IPS security services on Cisco network and security devices. It's a unified interface for managing firewall rules across different Cisco devices supporting the Cisco Firewall family of products, with its flexible rule specification methods for improved productivity and organization of rules; powerful toolset to identify configuration errors and optimize firewall rules. </div> <a name="wp9000222"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 12pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pFigureCaptionCMT"> <b>Figure 3. </b>Defining Firewall Policies with Cisco Security Manager GUI </p> <a name="wp9000223"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> <img src="/c/dam/en/us/products/collateral/security/ios-firewall/product_data_sheet09186a0080117962.doc/_jcr_content/renditions/product_data_sheet09186a0080117962-3.jpg" height="386" width="506" id="wp3000003" border="0" hspace="0" vspace="0"/> </div> <a name="wp9000224"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 3. </b>Firewall Services Support </p> <a name="wp9000225"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000044table4000003"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000044"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> User group firewall support </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000045"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Intra-zone firewall support </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000046"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Stateful inspection engine </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000047"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Secure network posture by default </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000048"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Packet tracer for debugging* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000049"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Packet capture capabilities for packet sniffing* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000050"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Independent inspection parameters on a per-flow basis </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000051"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> VRF/VLAN aware NAT </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000052"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Bidirectional NAT </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000053"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Policy NAT </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000054"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> VPN NAT transparency </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000055"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Ability to capture drops </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000056"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Stateless SYN flood protection </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000057"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> TCP session timeout (specify configurable options) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000058"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> UDP session timeout (specify configurable options) </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000226"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />*Cisco IOS Software 12.4(20)T or later release is required. </div> <a name="wp9000227"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 4. </b>Access Control Support </p> <a name="wp9000228"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000059table4000004"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000059"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Inbound access control lists (ACLs) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000060"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Outbound ACLs </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000061"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Layer 2 (transparent mode) ACLs </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000062"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Time of day based policies </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000063"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> ACL editing (insert/delete individual rules in existing ACL) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000064"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Able to add comments to ACLs </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000065"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Object grouping support for simplified firewall policy definition* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000066"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Ability to match on "no type" with service object group </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000067"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Time-based ACLs </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000068"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Add/remove ACL entry by ACL entry line number </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000069"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Ability to rename an ACL </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000070"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Enabling/disabling of ACL entries </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000229"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />*Cisco IOS Software 12.4(20)T or later release is required. </div> <a name="wp9000230"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 5. </b>Table 6 Routing Network Integration Support </p> <a name="wp9000231"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000071table4000005"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000071"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Security contexts (virtual firewalls) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000072"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Transparent firewall (Layer 2 transparent firewall) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000073"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Mixed mode (L2/L3 firewall on same box) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000074"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Static route </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000075"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Open Shortest Path First (OSPF) routing </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000076"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RIP routing </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000077"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> EIGRP routing </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000078"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> IS-IS routing (multiple contexts) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000079"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> BGP routing (multiple contexts) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000080"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Multicast sparse-dense mode </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000081"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Multicast PIM bidir mode </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000082"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Multicast PIM sparse mode </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000083"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Static multicast route (mroute) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000084"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> QoS (traffic shaping) </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000232"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 6. </b>Advanced Inspection Services Support </p> <a name="wp9000233"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000085table4000006"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000085"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> HTTP </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000086"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Port 80 Misuse prevention: HTTP tunnel prevention </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000087"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC compliance checking for protocol anomaly detection </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000088"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> HTTP command filtering: filter any HTTP command </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000089"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> MIME type filtering </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000090"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Regex filtering on HTTP messages </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000091"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> SMTP/ESMTP Control </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000092"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC compliance checking for protocol anomaly detection* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000093"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log or rate limit email messages based on sender* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000094"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log or rate limit email messages based on recipient* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000095"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log or rate limit email messages based on attachment file names/extensions* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000096"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log or rate limit email messages based on content within headers or bodies of messages* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000097"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Combat spam by denying/rate-limit/log email messages with a large number of recipients or an excessive number of invalid email addresses* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000098"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Combat spam by controlling usage of email relays* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000099"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> IM and p2p Control </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000100"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering Windows Messenger instant messaging </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000101"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering AIM instant messaging </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000102"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering Yahoo instant messaging </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000103"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering MSN instant messaging </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000104"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering Kazaa peer-to-peer services </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000105"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Filtering Gnutella peer-to-peer services </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000106"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log file transfers </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000107"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log video conferencing </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000108"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny/log voice chat </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000109"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Control direction services can be initiated </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000110"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Content/URL Filtering </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000111"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Support for multiple URL filtering servers (primary/backup) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000112"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Long URL filtering (greater than ~1024 bytes) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000113"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> HTTP server response buffering </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000114"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> URL auditing (admin see URLs user are attempting to access) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000115"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Local URL filtering exception policy (based on IP address/local policy) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000116"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Java blocking </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000117"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Antispyware </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000118"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Antispam </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000119"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Antiphishing </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000120"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Automatic updates </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000234"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> </div> <a name="wp9000235"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> * Cisco IOS Software 12.4(20)T or later release is required. </div> <a name="wp9000236"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 7. </b>Unified Communications Support </p> <a name="wp9000237"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000121table4000007"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000121"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Session Initiation Protocol (SIP) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000122"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC 3262 (PRACK)* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000123"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC 3265 (SUBSCRIBE/NOTIFY)* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000124"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC 3311 (UPDATE)* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000125"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC 3515 (REFER)* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000126"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RFC 3428 (MESSAGE)* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000127"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> RTP and RTCP connection inspection* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000128"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Rate-limiting* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000129"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> PAT with SIP* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000130"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Enforcement of mandatory header fields (From, To, Call-Id, CSeq, Via, Max-Forwards ) presence and validity* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000131"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Enforcement of forbidden header fields* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000132"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Enforcement of SIP dialog and SIP transaction* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000133"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Check URL in Header fields against permit/deny list of callers/callee* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000134"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Check Max-Forwards header field; action on Max-Forwards =0 configurable by user* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000135"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Recognition of non-SIP packet on SIP signaling port* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000136"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Permit/deny third -arty registrations/deregistrations and if permit, ability to specify users allowed to do that* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000137"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Protection against buffer overflows* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000138"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Protection against DDOS attacks* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000139"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> User configurable allowable SIP commands/extensions* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000140"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Skinny Client Control Protocol Control (SCCP) </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000141"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Translation of embedded IP addresses and ports* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000142"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Dynamic pinholing* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000143"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Protocol conformance* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000144"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Configurable timeouts for skinny signaling and media channel* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000145"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> H.323 Control </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000146"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> H.323 (v1 and v2) (NAT/PAT) * </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000147"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> H.323 (v3 and v4) (NAT/PAT) * </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000148"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> H.225: RAS* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000149"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> H.323: direct call signaling* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000150"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> H.323: T.38 (fax over IP) * </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000238"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />* Cisco IOS Software 12.4(20)T or later release is required. </div> <a name="wp9000239"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 8. </b>Monitoring and Management Support </p> <a name="wp9000240"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000151table4000008"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000151"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> SSHv2 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000152"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> SNMPv3* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000153"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco Configuration Professional </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000154"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco Security Manager* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000155"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Netflow </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000156"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Class-map (MPF) for management traffic </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000241"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />* Supported on Classic Cisco IOS Firewall only. </div> <a name="wp9000242"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 9. </b>IPv6 Support </p> <a name="wp9000243"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000157table4000009"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000157"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> IPv6 inspection, access control, and management* </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000158"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> IPv6 Firewall* </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000244"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />* Supported on Classic Cisco IOS Firewall only. </div> <a name="wp9000245"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 6pt; margin-left: 47pt; margin-right: 0pt; margin-top: 12pt; text-align: left; text-decoration: none; text-indent: -47pt; text-transform: none" class="pTableCaptionCMT"> <b>Table 10. </b>Platform Support </p> <a name="wp9000246"> </a> <p class="pBodyRelative"> </p> <div align="left"> <table border="1" cellpadding="6" cellspacing="0" width="80%" bordercolor="#ADADAD" id="wp9000159table4000010"> <caption></caption> <tbody> <tr align="left" valign="top"> <td><a name="wp9000159"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Product </p> </td> <td><a name="wp9000160"> </a><p style="font-style: normal; font-variant: normal; font-weight: bold; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-indent: 0pt; text-transform: none" class="pChart_headCMT"> Platforms Supported </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000161"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 800 Series Routers </p> </td> <td><a name="wp9000162"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 831*, 836*, 837*, 851, 857, 860**, 871, 876, 877, 878, 881, 888, 88X, and 89X </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000163"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 1700* Series Modular Access Routers </p> </td> <td><a name="wp9000164"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 1701, 1702, 1711, 1712, 1721, 1751, 1751-V, and 1760 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000165"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 1800 Series Integrated Services Routers </p> </td> <td><a name="wp9000166"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 1801, 1802,1803,1811,1812, 1841 and 1861 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000167"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 1900 Series Integrated Services Routers </p> </td> <td><a name="wp9000168"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 1941 and 1941W </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000169"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 2600* Series Multiservice Platforms </p> </td> <td><a name="wp9000170"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 2610XM, 2611XM, 2620XM, 2621XM, 2650XM, 2651XM, and 2691 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000171"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 2800 Series Integrated Services Routers </p> </td> <td><a name="wp9000172"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 2801, 2811, 2821, and 2851 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000173"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 2900 Series Integrated Services Routers </p> </td> <td><a name="wp9000174"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 2901, 2911, 2921, and 2951 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000175"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 3600* Series Multiservice Platforms </p> </td> <td><a name="wp9000176"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 3660 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000177"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 3700* Series Multiservice Access Routers </p> </td> <td><a name="wp9000178"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 3725 and 3745 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000179"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 3800 Series Integrated Services Routers </p> </td> <td><a name="wp9000180"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 3825 and 3845 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000181"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 3900 Series Integrated Service Routers </p> </td> <td><a name="wp9000182"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 3925 and 3945 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000183"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 7200 Series Routers </p> </td> <td><a name="wp9000184"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 7201, 7204VXR, and 7206VXR </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000185"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco 7300 Series Routers </p> </td> <td><a name="wp9000186"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco 7301 </p> </td> </tr> <tr align="left" valign="top"> <td><a name="wp9000187"> </a><p style="font-style: normal; font-variant: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_subheadCMT"> Cisco ASR 1000 Series Aggregation Services Routers </p> </td> <td><a name="wp9000188"> </a><p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-left: 3pt; margin-right: 3pt; margin-top: 3pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pChart_bodyCMT"> Cisco ASR 1002, 1004, and 1006 </p> </td> </tr> </tbody> </table> </div> <p class="pBodyRelative"> </p> <a name="wp9000247"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> <br />*End-of-life router platforms. </div> <a name="wp9000248"> </a> <div style="font-size: 8pt; font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 0pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pDefault"> **Layer 2 transparent firewall mode is not supported. </div> <a name="wp9000249"> </a> <p style="font-size: 10pt; font-style: normal; font-variant: normal; font-weight: bold; margin-left: 0pt; margin-right: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pSubhead1CMT"> Additional Resources </p> <a name="wp9000250"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> For more information about Cisco IOS Firewall and other router security technologies, visit the following webpages: </div> <a name="wp9000251"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco IOS Firewall: <a href="//www.cisco.com/go/iosfirewall"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/iosfirewall</span></a> </p> <a name="wp9000252"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco IOS Software IPS: <a href="//www.cisco.com/go/iosips"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/iosips</span></a> </p> <a name="wp9000253"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco IOS content filtering: <a href="//www.cisco.com/go/ioscontentfiltering"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/ioscontentfiltering</span></a> </p> <a name="wp9000254"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco Configuration Professional: <a href="//www.cisco.com/go/ccp"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/ccp</span></a> </p> <a name="wp9000255"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco Router and Security Device Manager: <a href="//www.cisco.com/go/sdm"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/sdm</span></a> </p> <a name="wp9000256"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco Integrated Services Routers: <a href="//www.cisco.com/go/isr"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/isr</span></a> </p> <a name="wp9000257"> </a> <p style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 3pt; margin-right: 0pt; margin-top: 0pt; text-decoration: none; text-transform: none" class="pBulletCMT"> • Cisco information on how to be PCI compliant: <a href="//www.cisco.com/go/pci"><span style="font-style: normal; font-weight: normal">www.cisco.com/go/pci</span></a> </p> <a name="wp9000259"> </a> <div style="font-style: normal; font-variant: normal; font-weight: normal; margin-bottom: 7pt; margin-left: 0pt; margin-right: 0pt; margin-top: 0pt; text-align: left; text-decoration: none; text-indent: 0pt; text-transform: none" class="pBodyCMT"> Please note the configuration examples and documentation demonstrates how IOS Firewall can secure and protect your network <span style="font-style: normal; font-weight: normal">. The list of supported applications and protocols are intended to provide a general idea of the information that is needed to use and support IOS Firewall. For specific Cisco ISR platform performance and scalability concerns please contact a Cisco representative. </span> </div> <hr noshade="" /> </body> </html> <cdc:do action="com.cisco.wem.framework.service.command.eotcontent.EOTResponsiveContent@5d1144d1" returnTypedAs="eotResponsiveContainerVo" id="eotResponsiveContainerVo" /> <div class="row full visitedlinks" style="padding: 0px; margin:0px"> <div class="col full" > </div> </div> </div> <script> if (window.cdc === undefined) { cdc = {}; } if (cdc.eot === undefined) { cdc.eot = {}; } cdc.eot.isEot = true; cdc.eot.isToc = false; jQuery(document).ready(function () { if (jQuery('.unpublished').length > 0) { let lastRel = "1.0"; if (jQuery('.published').length > 0) { lastRel = Number(jQuery('.published td')[0].innerText) + 1 + ".0"; } jQuery('.preview_revision').text(lastRel); } const linkItemsLen = jQuery("#eot-doc-wrapper link[rel='stylesheet']").length; function addNewTocStyleSheet() { let fileName="/etc/designs/cdc/transformation/wemdcmt_responsive.css", $head = jQuery("head"), linkElement = "<link rel='stylesheet' href='"+fileName+"' type='text/css' >"; $head.append(linkElement); } if (cdc.eot.isToc && !linkItemsLen) { addNewTocStyleSheet(); } else if (cdc.eot.isEot) { jQuery("#eot-doc-wrapper link[rel='stylesheet']").each(function () { const linkTag = jQuery(this), hrefVal = jQuery(linkTag).attr("href"); if (hrefVal != undefined && hrefVal.indexOf("support-responsive.css") == -1 && hrefVal.indexOf("_responsive.css") == -1) { let fileName = hrefVal.substr(hrefVal.lastIndexOf("/") + 1, hrefVal.length).split(".css")[0]; const filePath = "/etc/designs/cdc/transformation/"; if (fileName == "ccimr") { fileName = "techdocs_responsive"; } else if (fileName == "support-docs") { fileName = "support-responsive"; } else if (fileName == "framework") { fileName = "responsiveframework"; } else if (fileName == "dcmt") { fileName = "wemdcmt_responsive"; } else if (fileName == "techdocs_85_11_word") { fileName = "techdocs_85_11_word"; if (cdc.eot.isToc) { addNewTocStyleSheet(); } } else { fileName += "_responsive"; } jQuery(linkTag).attr("href", filePath + fileName + ".css"); } if (hrefVal.indexOf("support-responsive.css") > -1) { jQuery(linkTag).attr("href", "/etc/designs/cdc/transformation/support-responsive.css"); } }); jQuery("#eot-doc-wrapper > table").wrap("<div></div>"); jQuery("#eot-doc-wrapper table:not('.olh_note')").parent().css({ overflowX: "auto" }); } }); </script> </div> <div class="col narrow-v2"> <div class="rightRailComponent base-blowout"> <div class="eotPersonalization"> <section id="eotSupportCampaign"></section> </div>  <div> <div class="row full" data-owner="ID"> <div class="col full"> <div class="dmc-mbox compact" data-version="DM:components/target/mbox:V1.5.1"> <div class="mboxDefault"> <link rel="stylesheet" href="/etc/designs/cdc/dmr/text/base-v2.min.css" type="text/css"> <link rel="stylesheet" href="/etc/designs/cdc/dmr/letushelp/clientLib-v2.min.css" type="text/css">  <div class="dm0 dmc-letushelp-eot " data-config-metrics-group="sm_luh" data-config-metrics-title="right rail"> <h3>Contact Cisco</h3> <ul class="no-bullets" > <li class="c2c-no-margin"> <script> var cocoaBotTranslateObject={"Cisco_Proactive_Chat_Intro":"Welcome to Cisco!","Cisco_Chat_Now":"Chat with Sales","Cisco_Proactive_Chat_Content":"How can I help you?","Cisco_Proactive_Chat_Decline_Title":"Decline the chat invitation","Cisco_Proactive_Chat_Metrics_Group":"pop up chat","Cisco_Proactive_Chat_Decline":"No Thanks","Cisco_Proactive_Chat_Intro_Title":"Cisco:","Cisco_Proactive_Chat_Accept_Metrics_Item":"accept the chat invitation","Cisco_Proactive_Chat_Decline_Metrics_Item":"decline the chat invitation","Cisco_Proactive_Chat_Title":"Chat live with a Cisco representative","Cisco_Proactive_Chat_Accept_Title":"Accept the chat invitation","Cisco_Proactive_Chat_Accept":"Chat Now"}; </script> <script type="text/javascript" src="/c/dam/cdc/j/chatbot/chatbot.js"></script> <div class="ancr"> <div id="nhbtn" data-metrics-title="right rail" class="c2c-component"> </div> </div> </li> <li class="lnk1"> <div class="ancr"> <a href="https://www.cisco.com/site/us/en/about/contact-cisco/index.html?linkclickid=luh-contactus">Get a call from Sales</a> </div> </li> <li class="sub-title"> <h5>Call Sales:</h5> </li> <li class="luh-num"> <a href="tel:18005536387"> 1-800-553-6387 </a> </li> <li class="time-locale">US/CAN | 5am-5pm PT</li> <li class="lastlnk1"> <div class="ancr"> <a href="//www.cisco.com/c/en/us/support/index.html">Product / Technical Support</a> </div> </li> <li class="lastlnk2"> <div class="ancr"> <a href="https://www.cisco.com/site/us/en/learn/training-certifications/index.html">Training & Certification</a> </div> </li> </ul> </div> </div> <script type="text/javascript"> // Use the additional parameters, if provided. mboxCreate('us_luhrr','type=default'); </script> </div> </div> </div> </div> <div class="hideComponent"> <div class="eot-vav"> <ul> </ul> </div> </div>  <div class="eot-feedback-container"> <div class="eot-feedback"> <h3>Was this Document Helpful?</h3> <span class="eot-feedback-btnwrap"> <button class="eot-feedback-btn eot-feedback-btn-yes" aria-label="Was this Document Helpful?? Yes">Yes</button> <button class="eot-feedback-btn eot-feedback-btn-no" aria-label="Was this Document Helpful?? No">No</button> </span> <span lang="en" class="eot-feedback-olwrap"> <a href="javascript: void(0);" class="eot-feedback-ol" onclick="window.open('https://ciscocx.qualtrics.com/jfe/form/SV_0Tcp9VU8pUm4lBY?Ref=' + location.href + '&resize=false', 'feedback', 'width=650, height=460, scrollbars=1, menubar=1, resizable=1'); return false;"> <img id="feedback_img" border="0" style="cursor: pointer;" title="Feedback" src="//www.cisco.com/c/dam/cdc/i/Feedback_OceanBlue.png" alt="Feedback">Feedback</a> </span> </div> </div>  <div class="showClass"> </div> </div> </div> </div>   </div> <script type="module" src="/site/web-components/us/en/cdc-footer.js"></script> <cdc-footer></cdc-footer> <script type="text/javascript"> if(document.querySelector('#privacy-manager')!=null){ document.querySelector('#privacy-manager').href='#cookies'; } </script> <div id="fw-overlay"></div> <script src="/etc/designs/cdc/fw/b/responsive/js/eot.min.js"></script> <script src="/c/dam/cdc/t/ctm.js" type="text/javascript"></script>  <noscript><img src="//cisco.112.2o7.net/b/ss/cisco-mobile/5/12345" width="2" height="2" border="0" alt=""/></noscript> </body> </html>