Cisco firewalls

alliasneo

Hey guys, am I right in thinking that the access-lists that are configured on a firewall are slightly different to the ones configured on a router?


I'm not sure where I got this from but I seem to remember something about it being different, as in things coming in and out? Or is this the same as I've doing for a Cisco router?


Ip access-group in/out etc etc

docrice

The commands to apply it to an interface are slightly different and you also don't use inverse masks in ASA rules. You still have one ACL applied per interface, per direction in an ASA. Overall, the feel is pretty much the same. However, ASA code is not the same as IOS and while the basic flow of device management is about the same, there are a lot of differences in specific command sets.