This session addresses Cisco firewalls and how they are used to enforce security policy around the network. It includes best practices as part of a case study that illustrates these various techniques in practice and options on how they can be implemented. Common design scenarios are covered for both the ASA firewall appliance and the Cisco Firewall Services Module, including virtualization and transparent (Layer 2) mode. Pros and cons of each design are discussed in depth. Participants should have a working knowledge of TCP/IP and understand general networking and packet flow. This session focuses on the Cisco ASA Adaptive Security Appliance and Firewall Services Module and does not cover any Cisco IOS based firewall solutions.