I have a very basic question. Is cisco PIX an Application level firewall or Packet level firewall?
Is Cisco PIX Application level firewall or Packet level firewall?
Oct 14, 2005
3 Replies
It's a Stateful Inspection firewall.
Chris.
Packet firewall
In article , coin wrote, without providing any context :(
:Packet firewall
The question was whether the PIX was an application level firewall or a packet firewall.
The answer is that it runs at layer 5 or so -- a protocol level firewall. Most of what it does, it handles at layer 4, but there are some things it handles at layer 5, such as SMTP inspection, FTP port handling, and URL inspection. For SMTP and HTTP, it reassembles packets to prevent attacks from slipping by by splitting them between packets. For SMTP, it filters the complete layer 5 conversation, permitting only those commands that are on its internal allowed list.
PIX 6.x has no anti-virus, and does not attempt to do anything like validate SQL queries against an authorization schema.
Join the Discussion
Have something to add? Share your thoughts — no account required.
Didn't find your answer?
Ask the community — no account required