Cisco 678

[Andy Bradford]

Thus said "Corey Edwards" on Tue, 08 Apr 2003 09:19:52 PDT:

> It's running in NAT mode, but is  there anything else it can do? Would
> you trust this thing to protect your network, or would you add another
> firewall?

If it's running NAT, then it isn't  acting as a firwall per se, but does
not allow internal access to systems unless specifically setup to do so.

> It appears that  the 678 can do syslog logging?  Has anybody used that
> and if so, how well does it work? Are the logs useful and informative?

I use the syslog feature to log the information to my server and find it
useful to look back at when there are problems.

> How capable is the IP filtering? How does it compare to IPTables?

It sucks compared to iptables.

> Is CBOS limited in any way? Is  it possible to do TCP port redirection
> for say a transparent web proxy?

Not that I am aware, you would need a real firewall for this.

Andy
--
GnuPG ID 0xA63888C9 (D2DA 68C9 BB2B 26B4 8204  2219 A43E F450 A638 88C9)
[-----------[system uptime]--------------------------------------------]
  2:54pm  up 44 days, 20:53,  1 user,  load average: 1.00, 1.00, 1.00