Corporate Headquarters

•
An Internet firewall or part of an Internet firewall
•
A firewall between groups in your internal network
•
A firewall providing secure connections to or from branch offices
•
A firewall between your company network and your company partners networks
Cisco IOS firewall features provide the following benefits:
•
Protects internal networks from intrusion
•
Monitors traffic through network perimeters
•
Enables network commerce using the World Wide Web
At a minimum, you must configure basic traffic filtering to provide a basic firewall. You can configure 
your Cisco 7200 series router to function as a firewall by using the following Cisco IOS security features:
•
Static access lists and static or dynamic extended access lists
•
Lock-and-key (dynamic extended access lists)
Command
Purpose
hq-sanjose# 
show policy policy-map
Displays the configuration of all classes comprising the specified policy 
map.
hq-sanjose# 
show policy policy-map class 
class-name
Displays the configuration of the specified class of the specified policy 
map.
hq-sanjose# 
show policy interface
interface-name
Displays the configuration of all classes configured for all policy maps 
on the specified interface.

---

3-37
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 5—Configuring Cisco IOS Firewall Features
•
Reflective access lists
•
TCP intercept
•
Context-based access control
•
Security server support