If you have to have cisco you could use an asr1k. They support line rate
stateful firewalling and all routing protocols that you could think of.
On Oct 29, 2010 6:23 PM, "Dean Smith" <[email protected]> wrote:
>>I'm sure it doesn't. Routers are routers, firewalls are firewalls.
>
> So very narrow minded. In a large complex enterprise environment a few
> thousand routes delivered dynamically to a firewall robustly via BGP would
> be a godsend - and perfectly matched to the Cisco treatment of "high" and
> "low" security interfaces. We too have had to go transparent for this
reason
> alone in many places but its not always possible. (Oh and when will we get
> an HTTPS inspect on ASA/FWSM!)
>
> _______________________________________________
> cisco-nsp mailing list [email protected]
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/