[c-nsp] External Firewall

[Asbjorn Hojmark - Lists]

> What I want to know is whether I have to route all of my 
> packets through my external firewall, or is there a way to
> have the firewall set state in the router to enable it to
> route packets in a session without the further involvement
> of the firewall?

Something like that should be possible in the not-too-distant
future, though not with the 7200.

However, one of the larger ASAs should be able to keep up with
the 7200. Or you could go for the new ASR, which should be able
to do both tasks at the same time even faster than the 7200.

-A