Łukasz Bromirski wrote:
Kristian Larsson wrote:
I have no clue whether they're actually faster or
not at filtering packets.
They are. Statefully filtering and inspecting packets requires a lot
of horsepower, and CPUs in ASAs are much beefier than the ones You can
spot on ISRs or 7200. NAT and CBAC/ZBFW are features hitting CPUs
in routers a lot.
Uh, sorry, I thought it was 'at firewalling', not 'filtering packets'.
Still, ISRs and 7200 will be slower than ASA 5510 and higher models
with simple packet filtering (stateless that is). For stateful - way
slower.
--
"Don't expect me to cry for all the | Łukasz Bromirski
reasons you had to die" -- Kurt Cobain | http://lukasz.bromirski.net
_______________________________________________
cisco-nsp mailing list cisco-nsp@puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
