topic Re: IPS on IOS in Network Security

IPS on IOS

NAVIN PARWAL — Sun, 10 Mar 2019 09:36:34 GMT

Folks,

Please correct me if i am wrong. If i configure IPS on my 7200 series router (Internet router),using CLI into copy the drop.sdf file with the built in signatures and then applying the IPS inbound to the DS-3 interface, I will not drop packets even if the signatures are matched by default, unless i go to SDM and configure to do so???

I just do not want any unexpected interruption on my internet router when i configure the IPS feature on my internet router.

Thanks,

Re: IPS on IOS

pradeepde — Fri, 02 Sep 2005 12:48:34 GMT

The default behavior for engine failure allows for packets to be passed unscanned. To prevent traffic from being passed unscanned, issue the "ip ips fail closed" command, which forces the router to drop all packets if an SME build fails.

Re: IPS on IOS

NAVIN PARWAL — Fri, 02 Sep 2005 18:20:35 GMT

thanks for the reponse.

My question was that can i apply IPS statement in multiple Vlans at the same time in a sup 720 Running in hyrid mode??

Thanks