From: V Shekhar (vshekhar25@yahoo.com)
Date: Tue Aug 15 2006 - 08:21:29 ART
Not sure if i understood the question correctly, but i thought the advantage of using PIX over IOS ACLs.
AFAIK, IOS ACLs do not maintain state information, they do a lookup for each and every packet they recieve. (Unless using CBAC).
But with PIX they maintain state even for UDP traffic by approximating them.
This results in a better performance.
-sHekHar.
----- Original Message ----
From: 2nd CCIE <doubleccie@yahoo.com>
To: ccielab@groupstudy.com; security@groupstudy.com
Sent: Tuesday, August 15, 2006 1:20:50 PM
Subject: UDP and PIX
I just wonder if anyone can clarify this question for me
what the advantage of using PIX instead of ACL for the UDP traffic ?
appreciate the help
---------------------------------
Stay in the know. Pulse on the new Yahoo.com. Check it out.
This archive was generated by hypermail 2.1.4 : Fri Sep 01 2006 - 15:41:57 ART