| Summary

| In this module, ACLs and CBAC were covered. CBAC was shown to be a more specific, security minded ACL. ACLs are used to filter and secure network traffic. While ACLs filter network traffic by controlling whether routed or switched packets are forwarded or blocked at the interface, CBAC is used to create temporary openings in the firewall access lists. The student should understand the six steps required for configuring CBAC:

1. Set audit trails and alerts
2. Set global timeouts and thresholds
3. Define PAM
4. Define inspection rules
5. Apply inspection rules and ACLs to interfaces
6. Test and verify

By understanding the tasks required to configure CBAC, the student should understand the following concepts:

- What CBAC is, how it works, and how to configure and test the different components
- How and why Inspection Rules are used with Java, RPC Applications, SMTP, and IP Fragmentation, and how they are applied to router interfaces.
- The different configuration requirements for a two-interface solution versus a multi-interface solution.