topic the defferences between IDS & IPS in Network Security https://community.cisco.com/t5/network-security/the-defferences-between-ids-ips/m-p/1413265#M750645 <P>dear experts, would you mind describing to me the differences between the IDS, IPS, and the normal functions of the firewall policies in the ASA and PIX firewall?</P><P>thanks alot for your help</P><P>Labib Makar </P> Mon, 11 Mar 2019 17:00:01 GMT hanyawad 2019-03-11T17:00:01Z the defferences between IDS & IPS https://community.cisco.com/t5/network-security/the-defferences-between-ids-ips/m-p/1413265#M750645 <P>dear experts, would you mind describing to me the differences between the IDS, IPS, and the normal functions of the firewall policies in the ASA and PIX firewall?</P><P>thanks alot for your help</P><P>Labib Makar </P> Mon, 11 Mar 2019 17:00:01 GMT https://community.cisco.com/t5/network-security/the-defferences-between-ids-ips/m-p/1413265#M750645 hanyawad 2019-03-11T17:00:01Z Re: the defferences between IDS & IPS https://community.cisco.com/t5/network-security/the-defferences-between-ids-ips/m-p/1413266#M750669 <HTML><HEAD></HEAD><BODY><P>Hello,</P><P></P><P><SPAN style="font-family: Calibri;"><SPAN>Basically IDS (Intrusion Detection System) is a device which can sniff (copy)&nbsp; traffic and analyze (compare against pre-defined signatures) it for any bad behavior or malicious traffic, this means that IDS device can’t be positioned inline in the path of traffic which results of limitation of its capability of protection (it is more Detection not Prevention/Protection).</SPAN></SPAN>So basically, it is a passive-monitoring system which may be used in conjunction with IPS to prevent attacks.</P><P></P><P><SPAN style="font-family: Calibri;"><SPAN>While IPS </SPAN></SPAN><SPAN style="font-family: Calibri;"><SPAN>(Intrusion Prevention System) </SPAN></SPAN><SPAN style="font-family: Calibri;"><SPAN> can be deployed <STRONG>inline</STRONG> which gives it ability to block malicious / bad traffic before it reaches its destination. But you have to be carful as nowadays you might find device described as IDS which can be deployed inline like Cisco IDSM which is in fact IPS but they are using both names interchangeably.</SPAN></SPAN></P><P></P><P>HTH</P><P></P><P>Vijaya</P></BODY></HTML> Fri, 22 Jan 2010 04:59:54 GMT https://community.cisco.com/t5/network-security/the-defferences-between-ids-ips/m-p/1413266#M750669 vilaxmi 2010-01-22T04:59:54Z