interface and direction to apply CBAC inspect rules

[rickrude11]

hey there,

I can't find a definitive answer regarding which direction you should apply the inspect rules on what interface.

My understanding was that the first packet that initiates the connection needs to be inspected, so that cbac can modify the acl for return traffic.. is that correct?

Personally I have applied it outbound on the external interface on my home router.

thanks.

 

[maczen]

You can apply it to the outbound interface is you only have inside and outside networks.. If you also have a DMZ you would apply it on the inside..

Here is a link that may be of assistance..

http://www.nortfm.com/?View=entry&EntryID=16

B Haines
CCNA R&S, ETA FOI