How does cisco routers prevent from Dos attack?, Do they have inetral firewall?.

Thanks
Mark