Cisco Systems OL-4015-08 Firewall Policy Use Case Scenario

30-29
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Chapter30 More About....
Firewall Policy Use Case Scenario
– track /rtr or both is not configured
– route-map is removed
– Access-list is removed or access-list is modified (for example, tracking
ip address is modified)
– The SDM-supported interfaces are configured with unsupported
configurations
– The primary interfaces are not supported by SDM
Firewall Policy Use Case Scenario
In this scenario, a firewall and DMZ network have been created using the SDM
Firewall wizard. The user has added a webserver to the DMZ network, and needs
to allow web traffic into the DMZ network.
These are the interfaces used in this scenario:
•Inside interface: Fast Ethernet 0/0
•Outside interface: Serial 1/0
•DMZ interface: Fast Ethernet 1/0
The following sections show how to use the Firewall Policy window to examine
the rules applied to router interfaces with the Firewall wizard or Rules windows
and how to modify access and inspection rules.
•Examining Originating Traffic: From Interface Fast Ethernet 0/0; To Interface
Serial 1/0
•Examining Returning Traffic: From Interface Ethernet 0/0; To Interface
Serial 1/0
•Examining Originating Traffic: From: Serial 1/0; To: Ethernet 1/0
•Allowing www Traffic to DMZ Interface.