How Data Moves Through The Fwsm In Routed Firewall Mode; An Inside User Visits A Web Server - Cisco 7604 Configuration Manual

Routed Mode Overview

How Data Moves Through the FWSM in Routed Firewall Mode

This section describes how data moves through the FWSM in routed firewall mode, and includes the
following topics:
•
•
•
•
•

An Inside User Visits a Web Server

Figure 5-1
Figure 5-1
Source Addr Translation
10.1.2.27
The following steps describe how data moves through the FWSM (see
1.
2.
Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM
5-2
An Inside User Visits a Web Server, page 5-2
An Outside User Visits a Web Server on the DMZ, page 5-3
An Inside User Visits a Web Server on the DMZ, page 5-4
An Outside User Attempts to Access an Inside Host, page 5-5
A DMZ User Attempts to Access an Inside Host, page 5-6
shows an inside user accessing an outside web server.
Inside to Outside
209.165.201.10
Inside
User
10.1.2.27
The user on the inside network requests a web page from www.example.com.
The FWSM receives the packet and because it is a new session, the FWSM verifies that the packet
is allowed according to the terms of the security policy (access lists, filters, AAA).
www.example.com
Outside
209.165.201.2
FWSM
10.1.2.1 10.1.1.1
DMZ
Web Server
10.1.1.3
Chapter 5 Configuring the Firewall Mode
Figure 5-1):
OL-20748-01