Depending on what model of router is being used, access lists tend to burden the CPU, especially if there are numerous access lists that must be referenced for every packet that travels through the router. Although a router can also provide some of the functions of a PIX by implementing access control lists, it also has to deal with routing packets from one network to another. PIX is a dedicated hardware device built to provide security.
PIX, however, goes above and beyond simply filtering packets, based on source/destination IP addresses, as well as source/destination TCP/UDP port numbers. Both devices are capable of filtering traffic with access control lists, and both devices are capable of providing Network Address Translation (NAT). There is some confusion on the difference between a Cisco PIX firewall and a router.
A firewall controls access to a network and enforces a security policy that can be tailored to suit the needs of a company. A firewall is a security mechanism located on a network that protects resources from other networks and individuals.
0 kommentar(er)
