RE: Cisco CBAC

CBAC works differently because it modifies inbound access-list according
to outbound traffic.

 

Your problem with FTP may be that you have not specified FTP as an
outbound protocol. 

ie

ip inspect name rule ftp

 

simply using

ip inspect name rule tcp

 

is not good enough because FTP changes inbound ports for the data
transmit operation

 

HTH

 

Andy

________________________________

From: Dan Tesch [mailto:dan.tesch@comcast.net] 
Sent: 22 October 2004 04:36
To: firewalls@securityfocus.com
Subject: Cisco CBAC

 

Since starting to work with a new company which is using

a Cisco 2611 router with firewall IOS, I have noticed too many

times problems with downloading from certain FTP sites,

some won't work at all - problems downloading from websites

and applications used from vendor websites having problems.

 

As I have studied CBAC and come to understand what it does,

I am starting to wonder if this could be causing some of the

problems - Has anyone else had similar experiences?  why

does a Cisco router with this feature work differently than a

standard NAT router?

 

Thanks