Cisco Secure Firewall 3100 - Inline Sets

Figure 8: Transparent Firewall Instances
Inline Sets
For inline sets, you must use unique interfaces and they must be physical interfaces or EtherChannels. The
following figure shows a packet destined to a host on the Instance C inside network from the internet. The
classifier assigns the packet to Instance C because the ingress interface is Ethernet 1/5, which is assigned to
Instance C.
Multi-Instance Mode for the Secure Firewall 3100
10
Multi-Instance Mode for the Secure Firewall 3100
Classification Examples