| 3.7 |  | Task 5: Inspection Rules and ACLs Applied to Router Interfaces |
| 3.7.3 |  | Three interface firewall |

| Multiple interfaces can be configured. As an example, configure the router to act as an IOS Firewall between three networks, inside, outside, and DMZ. Implement by a security policy allowing all general TCP and UDP outbound traffic initiated on the inside from network 10.0.0.0 to access the Internet and the DMZ host 172.16.0.2. ICMP traffic will also be allowed from the same network to the Internet and the DMZ host. Other networks on the inside, which are not defined, must be denied. For inbound traffic initiated on the outside, allow everyone to only access ICMP and HTTP to DMZ host 172.16.0.2. Any other traffic must be denied .

Utilize the demonstration activities to implement the security policy of the inbound, outbound, and DMZ bound traffic.

| Media Activity Demonstration Activity: Outbound Traffic 3 Interface Firewall In this activity, students will learn how to configure inspection rules for outbound, inbound, and DMZ traffic.