[c-nsp] External Firewall

[Fred Reimer]

Don't be giving out any NDA materials now...

Fred Reimer, CISSP, CCNP, CQS-VPN, CQS-ISS
Senior Network Engineer
Coleman Technologies, Inc.
954-298-1697


-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Asbjorn Hojmark -
Lists
Sent: Monday, March 24, 2008 5:07 PM
To: 'Sridhar Ayengar'
Cc: 'Cisco NSPs'
Subject: Re: [c-nsp] External Firewall

> What I want to know is whether I have to route all of my 
> packets through my external firewall, or is there a way to
> have the firewall set state in the router to enable it to
> route packets in a session without the further involvement
> of the firewall?

Something like that should be possible in the not-too-distant
future, though not with the 7200.

However, one of the larger ASAs should be able to keep up with
the 7200. Or you could go for the new ASR, which should be able
to do both tasks at the same time even faster than the 7200.

-A

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3080 bytes
Desc: not available
Url : https://puck.nether.net/pipermail/cisco-nsp/attachments/20080324/1a6c7fd6/attachment-0001.bin