Cisco 7604 Configuration Guide - Page 108

Routed Mode Overview Chapter 5 Configuring the Firewall Mode How Data Moves Through the FWSM in Routed Firewall Mode This section describes how data moves through the FWSM in routed firewall mode, and includes the following topics: • An Inside User Visits a Web Server, page 5-2 • An Outside User Visits a Web Server on the DMZ, page 5-3 • An Inside User Visits a Web Server on the DMZ, page 5-4 • An Outside User Attempts to Access an Inside Host, page 5-5 • A DMZ User Attempts to Access an Inside Host, page 5-6 An Inside User Visits a Web Server Figure 5-1 shows an inside user accessing an outside web server. Figure 5-1 Inside to Outside www.example.com Outside Source Addr Translation 10.1.2.27 209.165.201.10 10.1.2.1 209.165.201.2 FWSM 10.1.1.1 Inside DMZ 92888 User 10.1.2.27 Web Server 10.1.1.3 The following steps describe how data moves through the FWSM (see Figure 5-1): 1. The user on the inside network requests a web page from www.example.com. 2. The FWSM receives the packet and because it is a new session, the FWSM verifies that the packet is allowed according to the terms of the security policy (access lists, filters, AAA). Catalyst 6500 Series Switch and Cisco 7600 Series Router Firewall Services Module Configuration Guide using ASDM 5-2 OL-20748-01