if using the established keyword, a location close to the destination to ensure that return traffic is allowed

a location as close to the source of traffic as possible

a location centered between traffic destinations and sources to filter as much traffic as possible

a location as close to the destination of traffic as possible

A stateful firewall can filter application layer information, while a packet-filtering firewall cannot filter beyond the network layer.

A packet-filtering firewall typically can filter up to the transport layer, while a stateful firewall can filter up to the session layer.

Both stateful and packet-filtering firewalls can filter at the application layer.

A packet-filtering firewall uses session layer information to track the state of a connection, while a stateful firewall uses application layer information to track the state of a connection

A transparent firewall is typically implemented on a PC or server with firewall software running on it.

A packet-filtering firewall expands the number of IP addresses available and hides network addressing design.

A stateful firewall monitors the state of connections, whether the connection is in an initiation, data transfer, or termination state.

An application gateway firewall (proxy firewall) is typically implemented on a router to filter Layer 3 and Layer 4 information.

outbound and inbound access rules (ACL entries)

TCP SYN packets and the associated return ACK packets

source and destination IP addresses, and port numbers and sequencing information associated with a particular session

TCP control header and trailer information associated with a particular session

The entry remains in the state table after the session is terminated so that it can be reused by the host.

A dynamic ACL entry is added to the external interface in the inbound direction.

The internal interface ACL is reconfigured to allow the host IP address access to the Internet.

When traffic returns from its destination, it is reinspected, and a new entry is added to the state table.

source port

SYN and ACK flags

sequence number

protocol ID

reconnaissance

port redirection

trust exploitation

denial of Service

auto secure privileged EXEC command and the SDM One-Step Lockdown wizard

aaa configuration commands and the SDM Basic Firewall wizard

class-maps, policy-maps, and service-policy configuration commands and the SDM IPS wizard

router hardening

operating system security

. physical security

remote access security

flash security

zone isolation

assign users who can use the view

assign commands to the view

associate the view with the root view

create a view using the parser view view-name command

assign a secret password to the view

privilege exec level 0

. privilege exec level 1

privilege exec level 15

privilege exec level 2

authorization

authentication

accounting

accessibility

topology-based switching

. autonomous switching

process switching

optimum switching