[c-nsp] FWSM migration...

[Voll, Scott]

Stateful inspection.

If you just want a FW you would not need the IDSM.  Depending on
application you might also want the IDSM.  (depends)

Scott

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Mark Tohill
Sent: Thursday, March 01, 2007 1:40 AM
To: cisco-nsp at puck.nether.net
Subject: [c-nsp] FWSM migration...

Hi,
 
We have 6509/720-3A's acting as aggregation switches in a small Internet
Data Centre doing L3, L2 Vlaning, OSPF etc. The boxes seem to be well
capable of handling current traffic loads.
 
With the 6509's capablity to implement ACL's/VACL's in the PFC, what
extra would a FWSM give us? The documentation mentions traffic
inspection at L4-L7 and would you even consider running FWSM's without
IDSM-2's?
 
Any thoughts?
 
Thanks,
Mark
 
_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/