Cisco IOS Firewall Feature Set
Context-Based Access Control (CBAC)
Secure, per-application filtering
Support for advanced protocols (H.323, SQLnet, RealAudio, etc.)
Control downloading of Java applets
Denial of Service detection and prevention
Configuration and management
Enhanced Security for the Intelligent Internet