What is virtual firewall?
Virtual firewall enables a physical firewall to be
partitioned into multiple standalone firewalls
How each virtual is define
Each virtual firewall is an independent device.
Each firewall has its own configuration, security polices,
routing table and administrators.
What this virtual firewall called as
Each virtual firewall is known as security context
There is service Provider Company that sells security
polices to customer. What decision does thtt company take for providing
security services to its customer
Companyywill create security contextfor customerinstead of
using separate physical fiorewall
What are uses of security contstxt or virua firewall
Thers is a large enterprise that reuie difern security
polices to implent for ech department
We want to integrate security policies of many physical
firewlllss into one physical firewall
Which ASA models support virtual firewall
Supported on Cisco ASA 5510 to 5585-x
Not supported on Cisco ASA 5505
How Cisco ASA is divided in virtual firewall environment
In virtual firewall environment , Cisco ASA is divided into
three types
System Execution Space also known as system context
Admin context
One or more user contexts also known as customer context
How each security context is handled?
Each context can be indepednetly configured and maintained
What is system
executions psce
System execution psace I sue for defining te attribute and
setting for other security context
What seting system executin does not contain
Layer2 or layer 3 interfac or any network setting
Which three important setting can be configured for each
context in system executuion space
Context name
Location of contexts startup configuration
Interface allocation
What is the name for context startup configuration file
Configlet
Where does system execution space configuration resides
System execution pace resides in non volatile random access
memory (NVRAM)
Where does the configuration fle for each security context
store
Local flash memory or on netwok storage server
What are the
different network protocols can be used to retrieve configuration files
stored on an external storage server
TFTP
FTP
HTTPS
HTTP
Which context is created by system execution space
Admin context
No comments:
Post a Comment