Cisco Cisco Packet Data Interworking Function (PDIF) Documentation Roadmaps

Cisco

Personal Stateful Firewall Overview

▀ How Personal Stateful Firewall Works

▄ Cisco ASR 5000 Series Product Overview

OL-22937-01

Figure 218. Continued... Stateful Firewall Processing

Flow limit per

subscriber reached

yes

Update statistics

and drop the

packet

pass

Max allowed memory

limits of SessMgr

reached

Update statistics

and drop the

packet

yes

no

Max no. of flows per

SessMgr reached

Update statistics

and drop the

packet

yes

FW rule match

denied

Update statistics

and drop the

packet

no

Flooding detected

Update statistics

and drop the

packet

yes

no

allowed

no