Cisco IPS

5y5tadmin — Tue, 26 Mar 2019 00:21:42 GMT

Hi,

Currently we have Cisco firewall 5515-X that acts only for filtering but not blocking any suspicious activity. Now, our ISP is connect to the outside interface of this firewall. Let say, if we want to put in the IPS, it must be in front of firewall right?

Any recommended IPS that can be use?

Kindly advice us on this.Thanks!

IPS can be either inside or

Marvin Rhoads — Fri, 15 Jul 2016 05:05:05 GMT

IPS can be either inside or outside the firewall.

Inside usually makes more sense because then the firewall ACL will prevent most inbound traffic with less computational cost than first screening the raw internet incoming traffic (and scanning attempts etc.) with an IPS.

You could add the FirePOWER software modules to your ASA and license the IPS feature on it. That sits inline with the internal ASA traffic flow and inspects traffic redirected to it via Modular Policy Framework (MPF- service-policy, policy-map and class-map).

topic Cisco IPS in Network Security

Cisco IPS

IPS can be either inside or