topic Re: IPS Deployment in Network Security

IPS Deployment

waridtel.com — Sun, 10 Mar 2019 11:20:02 GMT

Hi,

I am new to IPS. Can anybody tell me what the basic policies that need to be configured on the IPS when deploying it in DMZ.

Thanks in advance.

Best Regards,

Rahim

Re: IPS Deployment

abinjola — Fri, 17 Oct 2008 05:34:36 GMT

Well..if you are asking what signatures needs to be configured then I would say leave it at default signature configuration and you may tune it after a month once you notice a specific traffic pattern ...

Refer to this

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliguide.html

Re: IPS Deployment

waridtel.com — Fri, 17 Oct 2008 05:48:15 GMT

Hi,

Thanks for the help. I am actually more concerned regarding the placement of IPS and in which mode I should configure IPS.

1. Promiscous.

2. Inline.

Best Regards,

Rahim

Re: IPS Deployment

abinjola — Sat, 18 Oct 2008 05:13:20 GMT

See it depends on requirement...promiscous means in parallel to your network , which means the first packet would always go through the network/IDS and then IDS would start taking actions of consecutive packets..inline is blocking the very first packet..

see of this helps more..

http://www.cisco.com/en/US/docs/security/ips/5.1/configuration/guide/cli/cliInter.html