Cisco Catalyst 6500 Series Installation Manual page 88

Firewall Services Module (WS-SVC-FWM-1-K9)
•
•
•
•
•
•
The following PIX firewall features are not supported by the module:
•
•
•
•
•
•
Catalyst 6500 Series Switch Module Installation Guide
1-64
Security—Cisco firewalls provide the latest in security technology ranging
from stateful inspection firewalls to content filtering capabilities that help
protect your network environment from future attacks. Another security
feature is the adaptive security algorithm (ASA), which maintains the
firewalled areas between the networks controlled by the firewall.
The stateful, connection-oriented ASA creates session flows based on source
and destination addresses, TCP sequence numbers (which are
nonpredictable), port numbers, and additional TCP flags. You can control all
inbound and outbound traffic by applying security policies to each connection
table entry.
Performance—With support for up to 6 gigabits of throughput, firewalls can
provide protection in the most demanding network environments.
Reliability—Cisco firewalls provide adaptable security services for
operation-critical network environments by using the integrated stateful
failover capabilities within the Firewall Services Module. Network traffic can
be automatically sent to a hot-standby module in the event of a failure, while
maintaining concurrent connections with automated state synchronization
between the primary module and the standby module.
Network Address Translation (NAT) and Port Address Translation
(PAT)—Cisco firewalls provide NAT and PAT services that conceal IP
addresses of internal networks and expand network address space for internal
networks.
Denial-of-service (DoS) attack prevention—Cisco firewalls protect the
firewall and networks behind them from attempts to gain access, which can
bring a network to a halt.
Scalability—Up to two modules are supported in a single Catalyst 6500
chassis.
Virtual private networks (VPN) (the module supports IPSec VPN only for
management purposes.)
Intrusion detection system (IDS) syslog messages
PIX Firewall Manager (PFM)
CSPM
Conduit
DHCP client
Chapter 1 Product Overview
78-15725-02