https://community.cisco.com/t5/network-security/exclude-network-traffic-from-inspection/m-p/531463#M92583 <HTML><HEAD></HEAD><BODY><P>What kind if traffic you would like to exclude? By not using IPS filter (prevent oversubscribtion or cpu processing), you basically need filter it out at switch/router/firewall port level. </P><P></P><P>You can create ACL to filter the unwanted traffic from hitting your IPS interface. But the setback is, you might filter passing through traffic/protocol that is needed by clients/hosts on the other side of the network.</P><P></P><P>I guess this is where you really need the IPS filter. Basically, your IPS model selection should be suitable for the link &amp; bandwidth that it need to monitor/filter to prevent oversubscription.</P><P></P><P>Rgds,</P><P>AK</P></BODY></HTML> Tue, 22 Aug 2006 07:56:31 GMT a.kiprawih 2006-08-22T07:56:31Z https://community.cisco.com/t5/network-security/exclude-network-traffic-from-inspection/m-p/531462#M92581 <P>Hi,</P><P>May I configure my IPS (this is an appliance), not to monitor, analyse some network traffic? I know I can create filters for events, but I want to prevent my box from oversubscribtion, so I don't want to monitor some type of traffic with it.</P><P>Thx</P> Sun, 10 Mar 2019 10:10:46 GMT https://community.cisco.com/t5/network-security/exclude-network-traffic-from-inspection/m-p/531462#M92581 teperjesi 2019-03-10T10:10:46Z https://community.cisco.com/t5/network-security/exclude-network-traffic-from-inspection/m-p/531463#M92583 <HTML><HEAD></HEAD><BODY><P>What kind if traffic you would like to exclude? By not using IPS filter (prevent oversubscribtion or cpu processing), you basically need filter it out at switch/router/firewall port level. </P><P></P><P>You can create ACL to filter the unwanted traffic from hitting your IPS interface. But the setback is, you might filter passing through traffic/protocol that is needed by clients/hosts on the other side of the network.</P><P></P><P>I guess this is where you really need the IPS filter. Basically, your IPS model selection should be suitable for the link &amp; bandwidth that it need to monitor/filter to prevent oversubscription.</P><P></P><P>Rgds,</P><P>AK</P></BODY></HTML> Tue, 22 Aug 2006 07:56:31 GMT https://community.cisco.com/t5/network-security/exclude-network-traffic-from-inspection/m-p/531463#M92583 a.kiprawih 2006-08-22T07:56:31Z