From: Brian McGahan (bmcgahan@internetworkexpert.com)
Date: Sat Nov 25 2006 - 00:04:08 ART
Hi Shaun,
CBAC or "ip inspect" is an enhancement of the functionality of reflexive access-lists, and a subset of what the PIX's ASA does. TCP Intercept is a smaller subset of this that checks just for half open TCP sessions to prevent SYN attacks. For specific version support check the feature navigator at http://www.cisco.com/go/fn/
HTH,
Brian McGahan, CCIE #8593 (R&S/SP)
bmcgahan@internetworkexpert.com
Internetwork Expert, Inc.
http://www.InternetworkExpert.com <https://webmail.123together.com/exchweb/bin/redir.asp?URL=http://www.InternetworkExpert.com>
Toll Free: 877-224-8987 x 705
Outside US: 775-826-4344 x 705
24/7 Support: http://forum.internetworkexpert.com <https://webmail.123together.com/exchweb/bin/redir.asp?URL=http://forum.internetworkexpert.com>
Live Chat: http://www.internetworkexpert.com/chat/ <https://webmail.123together.com/exchweb/bin/redir.asp?URL=http://www.internetworkexpert.com/chat/>
________________________________
From: nobody@groupstudy.com on behalf of Shaun Nicholson
Sent: Fri 11/24/2006 7:59 PM
To: 'Cisco certification'
Subject: IOS diferances
Hi
I have been working through a few labs and found that my 2621xm does not
have the IP TCP Intercept commands available, however I do have IP INSPECT,
they seem to be very similar commands with the IP TCP version has more
depth.
So first how do I get the IP TCP Intercept commands Im presuming they come
in enterprise fw/ids feature set so can anyone confirm that is the case, and
second do I need to get this version of IOS or can I get by with the IP
Inspect commands as like I said earlier they seem to be very similar.
Thx in advance
Shaun Nicholson CCIE 6705
CCNP, CCSP, INFOSEC, JNCIA-M
-- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.430 / Virus Database: 268.14.14/548 - Release Date: 11/23/2006 3:22 PM
This archive was generated by hypermail 2.1.4 : Fri Dec 01 2006 - 08:05:48 ART