FWSM

[b1337318]

What would be the main reason for using the FWSM in a datacenter context? Is it to protect incoming traffic from outside the datacenter or protect traffic from one VLAN to another?

I am assuming ACLs can be used without using a FWSM and be applied directly to the VLANS in the Supervisor engine.

 

[unclerico]

there could be a number of different reasons to use the fwsm, two of which you mentioned.

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)

 

[b1337318]

Assuming:

-A separate Edge firewall device will filter traffic entering the datacenter.

-No use of multiple contexts

-No advanced firewall functionality needed between VLANS in the datacenter. No DPI or NATing

-VLAN ACLs could be created on the Supervisor instead of the FWSM.

What would be another reason to use the FWSM?

Thanks!

 

[unclerico]

well, security in layers is your best defense (aside from completely disconnecting your computer) so it still may be good to have. if you're not too terribly concerned then you don't need it

I hate all Uppercase... I don't want my groups to seem angry at me all the time! =)
- ColdFlame (vbscript forum)