Transparent Mode Overview - Cisco Catalyst 6500 Series Configuration Manual

Firewall Mode Overview
An DMZ User Attempts to Access an Inside Host
Figure 4-6
Figure 4-6
Inside
User
10.1.2.27
The steps below describe how data moves through the FWSM (see
1.
2.
3.

Transparent Mode Overview

This section describes transparent firewall mode, and includes the following topics:
•
•
•
•
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide
4-8
shows a user in the DMZ attempting to access the inside network.
DMZ to Inside
Outside
Switch
209.165.201.2
FWSM
10.1.2.1 10.1.1.1
Web Server
10.1.1.3
A user on the DMZ network attempts to reach an inside host. The DMZ host might know the real
address of an inside host, and because the DMZ does not have to route the traffic on the internet, the
private addressing scheme does not prevent routing.
The FWSM receives the packet, and because it is a new session, the FWSM verifies if the packet is
allowed according to the security policy (ACLs, filters, AAA).
The packet is denied, and the FWSM drops the packet and logs the connection attempt.
Transparent Firewall Features, page 4-9
Using the Transparent Firewall in Your Network, page 4-10
Transparent Firewall Guidelines, page 4-11
How Data Moves Through the Transparent Firewall, page 4-12
DMZ
Chapter 4 Configuring the Firewall Mode
Figure 4-6):
OL-6392-01