topic Re: Cisco IPS for 10Gbps in Network Security

Cisco IPS for 10Gbps

tom.gill — Sun, 10 Mar 2019 11:58:36 GMT

I see the Cisco IPS 4260 scales up to 1Gb. What about speeds above 1Gb such as 10Gb? What solution fits in that scenario?

Thanks!

Re: Cisco IPS for 10Gbps

jan.nielsen — Tue, 27 Apr 2010 21:32:58 GMT

IPS 4270 has 10G interfaces and scales to 4Gb, but for higher bandwidth Cisco has reference designs for how to do this with Cisco technology.

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_example09186a0080671a8d.shtml

Re: Cisco IPS for 10Gbps

Dustin Ralich — Tue, 27 Apr 2010 21:43:36 GMT

Per the Product Specifications section of the 4200-series product data sheet, the 4260 sensor appliance is generally rated for 1 Gbps - 2 Gbps of traffic inspection (combined/total), with that rating sliding in either direction based on a number of factors/variables (one of which is whether the inspected traffic profile is more transactional or more media-rich).

For greater throughput, the 4270-20 sensor appliance is rated for 2 Gbps - 4 Gbps, and with the optional IPS-2X10GE-SR-INT= interface card, it gains two (2) 10GE fiber sensing interfaces. These can be used to inspect partially-utilized 10GE links (for example), for situations where a 1 Gbps sensing interface isn't enough.

References:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps9157/product_data_sheet09186a008014873c_ps4077_Products_Data_Sheet.html

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_installing_4270.html#wp18087