Comments on "IOS Zone-Based Firewall"

Hassan commented on IOS Zone-Based Firewall at 9:17 a.m. 28 Jun 2012

June 28, 2012, 2:17 am

Nice article,I have a question related to ZBF :In our setup we are using 2 router with 2 communication lines from the same ISP,i dong have any trouble with the traffic drop as we are only using one...

View Article

Gorgonzola commented on IOS Zone-Based Firewall at 11:51 p.m. 30 Sep 2012

September 30, 2012, 4:51 pm

For anyone who stumbles upon this article in the future, I can confirm that IOS 15.1(4)M4 does pass traffic between interfaces within the same zone without you having to explicitly define an intra-zone...

View Article

Adil commented on IOS Zone-Based Firewall at 4:45 p.m. 20 Dec 2012

December 20, 2012, 8:45 am

Hi,,Not only the article is good, the language used is very easy to understand in the first attempt...Keep up the good work.:)

View Article

Tahir commented on IOS Zone-Based Firewall at 1:19 p.m. 05 Feb 2013

February 5, 2013, 5:19 am

Excellent! Thanks for such a nice, brief and comprehensive explanation. :)It was excellent.

View Article

Erick commented on IOS Zone-Based Firewall at 5:05 p.m. 08 Feb 2013

February 8, 2013, 9:05 am

Really great article! I started using this on customer routers, but I ran into a problem. How do I exclude FTP with the "match protocol tcp" line? I found that passive FTP fails when I use this...

View Article

RuggeR29 commented on IOS Zone-Based Firewall at 11:03 p.m. 27 Mar 2013

March 27, 2013, 4:03 pm

This really is a fantastic introduction article for setting up a ZBF framework. It is very easy to understand. It now gives me a starting point for creating my own firewall, rather than having to rely...

View Article

slickrule commented on IOS Zone-Based Firewall at 11:16 a.m. 10 Jun 2013

June 10, 2013, 4:16 am

This has to be one of the best sites i come to get real study information from...currently studying for the CCIE and this blog has been a real reference tool for me...The way you keep the language...

View Article

Slavey commented on IOS Zone-Based Firewall at 2:05 p.m. 14 Jun 2013

June 14, 2013, 7:05 am

It's really nice; I've just learned something new today. I'll do some test in a lab before I go in production to see if it'll work with DMVPN, mpls, IP inspect in one router before I add ZBF for better...

View Article

Jenya commented on IOS Zone-Based Firewall at 11:01 a.m. 03 Jul 2013

July 3, 2013, 4:01 am

Recently I won the battle with asymmetric routing (two routers + two ISPs+ ZBF). Everything works fine now. If you are interested - drop me an email

View Article

cisisrguy commented on IOS Zone-Based Firewall at 5:10 p.m. 15 Aug 2013

August 15, 2013, 10:10 am

Jenya,You notate that you won the battle. how so? i am experiencing issue now with vti tunnel drops with the isp. the tunnel will drop the bgp will renegotiate causing sporadic outages that last a...

View Article

Andy commented on IOS Zone-Based Firewall at 11:25 p.m. 29 Oct 2013

October 29, 2013, 4:25 pm

Currently studying for my ccnp security - great help thanks!!

View Article

muhammad khan commented on IOS Zone-Based Firewall at 9:59 a.m. 24 Dec 2013

December 24, 2013, 1:59 am

Precise, graphical and easy to understand.I have been visiting your site more often now. I think Cisco need to learn lesson from this site and simply their articles.Good work Jeremy.Thank YOU

View Article

xcke commented on IOS Zone-Based Firewall at 4:36 p.m. 09 Feb 2014

February 9, 2014, 8:36 am

Hi, I'm wondering if this feature can be used on PE router's also.I.E.: We have a PE router, and I would like to implement ZFW for the internet VPN only.Upstream communication is handled by an...

View Article