They operate in inline mode. | |
They operate in promiscuous mode. | |
They have no potential impact on the data segment being monitored. | |
They are more vulnerable to evasion techniques than IDS. |
Apply the ACL to the interface prior to configuring access control entries to ensure that controls are applied immediately upon configuration. | |
Only one ACL per protocol, per direction, and per interface is allowed. | |
An "implicit deny" is applied to the start of the ACL entry by default. | |
ACLs filter all traffic through and sourced from the router. |
Virtual access list | |
IP routing | |
Hot standby routing protocol | |
Bridging |