|WS-C3560G-24TS-S||24 Ethernet 10/100/1000 ports and 4 SFP-based Gigabit Ethernet ports, IP-Base license||(formerly SMI) basic IP routing, RIP|
|WS-C3560G-24TS-E||24 Ethernet 10/100/1000 ports and 4 SFP-based Gigabit Ethernet ports, IP-Services license||(formerly EMI) OSPF, BGP4, Policy-based routing|
|CD-3560G-EMI=||IP Services License (formerly EMI) upgrade kit for IP Base versions of the Cisco Catalyst 3560G-24TS, Catalyst 3560G-24PS, Catalyst 3560G-48TS and Catalyst 3560G-48PS||Advanced IP routing|
The Context-Based Access Control (CBAC) feature inspects TCP and UDP packets at the application layer. CBAC monitors all the outgoing requests by creating temporary openings for outbound traffic at the firewall interface. The return traffic is allowed in only if it is the part of the original outgoing traffic. CBAC inspects all the outgoing packets and maintains state information for every session. CBAC then decides whether to deny or permit the incoming traffic, based on its state information.