| Overview

Module 10 will focus on access lists and how they are handled by the PIX Security Appliance. An ACL is a list kept by routers and PIX Security Appliances to control access to and from the router or firewall. For example, to prevent packets with a certain IP address from leaving a particular interface. This process of restricting packets based on defined criteria is called filtering. The first part of this module will focus on configuring both standard and turbo ACLs, understanding the differences between ACLs and conduits, and knowing how and when to use ACLs in different network environments.

Once a general understanding of how and when to use ACLs is discussed, the module goes into greater depth with filtering. The module discusses applet filtering and URL filtering. The student will learn when to use this technology and why it is necessary.

Finally, this module will introduce students to the concept of object grouping, which puts ACLs into object groups and nested object groups. To simplify the task of creating and applying ACLs, administrators can group network objects, such as hosts, and services such as FTP and HTTP. By grouping ACLs, the number of access lists can be drastically reduced.

NOTE: It is required that the student study the commands covered in the chapter using the labs and the command reference. Not all required commands are covered in sufficient detail in the text alone. Successful completion of this course requires a thorough knowledge of command syntax and application.