topic Re: IPS 4240 - power fail situation in Network Security

IPS 4240 - power fail situation

egain.com — Sun, 10 Mar 2019 10:08:02 GMT

If IPS 4240 is configured in IN-line mode and if its power supply fails, will it still keep network continuity up and pass the network traffic thr' it?

thanks

regards

Rakesh

======

Re: IPS 4240 - power fail situation

mhellman — Fri, 28 Jul 2006 12:17:58 GMT

no. see:

http://www.csc.shoremicro.com/

Re: IPS 4240 - power fail situation

DFiore — Fri, 28 Jul 2006 15:02:36 GMT

Rakesh,

No, it will not pass any traffic if it's in-line and the power fails. It becomes its own DoS for your network.

This is why Cisco recommends fault tolerant configs or a network bypass switch in case an IPS fails. Info on the bypass switch is at http://www.cisco.com/en/US/products/hw/vpndevc/ps4077/index.html ---

Look for the "Fail-Safe Bypass Solution" toward the middle of the page.

Hope this helps?

Re: IPS 4240 - power fail situation

egain.com — Fri, 28 Jul 2006 17:01:28 GMT

Thanks both of you.

What will be the reasons of not counting SM0240 switch (shore Microsystem) as single point of failure?

regards

Rakesh

=====

Re: IPS 4240 - power fail situation

DFiore — Fri, 28 Jul 2006 18:43:25 GMT

No reason at all. The bypass switch IS a single point of failure as well. Shore Micro has a solution to this in buying their more robust switch with extra power supplies and extra interfaces... But remember, you can take the single point of failure analysis to extreams-- the UPS, the rack, subsystem in the data center, etc., etc.

Re: IPS 4240 - power fail situation

egain.com — Fri, 28 Jul 2006 21:04:21 GMT

Agreed. I was trying to collect good reasons to tell our customers and make them agreed to.!.thanks for the reply.

regards

Rakesh

======

Re: IPS 4240 - power fail situation

mhellman — Mon, 31 Jul 2006 13:24:31 GMT

It is not a single point of failure, certainly not in the sense that the IPS is. If the power fails on the bypass switch, it will function just like a wire. This was confirmed by a Cisco engineer in a previous discussion:

http://forum.cisco.com/eforum/servlet/NetProf?page=netprof&forum=Security&topic=Intrusion%20Prevention%20Systems/IDS&CommCmd=MB%3Fcmd%3Dpass_through%26location%3Doutline%40%5E1%40%40.1dda5a1e/13#selected_message

Re: IPS 4240 - power fail situation

egain.com — Mon, 31 Jul 2006 16:21:47 GMT

This is good to know. thanks for checking this out.

regards

Rakesh

=====

Re: IPS 4240 - power fail situation

DFiore — Tue, 01 Aug 2006 17:31:58 GMT

Sorry Matt, my bad... I forgot the bypass switch becomes a wire when it looses power. At that point it shunts all traffic around (not thru) the IPS... Is this right?

Re: IPS 4240 - power fail situation

mhellman — Tue, 01 Aug 2006 17:52:18 GMT

That's a good question actually. I don't know much more than what marcabal said. All our sensors are passive. It seems like that would make the most sense though.