topic IPS at Edge in Network Security

IPS at Edge

alsayed — Sun, 10 Mar 2019 11:56:27 GMT

Hello

Please Clarify me,does the IPS stops Virus/Malware at the Edge,Like the ProxyAV or Fortinet or Even CSC-SSM

Thanks

Jennifer Halim — Tue, 30 Mar 2010 12:54:03 GMT

It does not protect against virus (not an anti virus appliance).

Here is what it can prevent:

alsayed — Tue, 30 Mar 2010 13:26:25 GMT

Thanks man,but it stops worm and Malware howz that? with no action for virus?

How the sensors works in order to stops worm and Malware

Explain more

Jennifer Halim — Tue, 30 Mar 2010 20:30:24 GMT

IPS sensor has the followiong features:

1) Analysis engine with thousands of signatures. If a packet and/or traffic matches specific signature, it will trigger specific action accordingly.

2) Anomaly engine, where it baseline the traffic pattern, and report if there is anomaly to the normal traffic pattern.

Here is a more detailed explaination of the IPS services:

IPS is not design to prevent virus, hence ASA has 2 different modules: AIP-SSM (IPS module) and CSC-SSM (antivirus module).

alsayed — Wed, 31 Mar 2010 06:42:50 GMT

But how it works to stop Warm and Malware? however CSC-SSM does this function as well

Jennifer Halim — Wed, 31 Mar 2010 08:31:54 GMT

CSC module only supports 4 protocols, ie: FTP, HTTP, SMTP and POP3.

IPS has thousands of signatures and handles all other protocols, not restrictive to the above 4 protocols on CSC module.