topic Does PIX 515 Support IDS/IPS? in Network Security

Does PIX 515 Support IDS/IPS?

sam-lee — Sun, 10 Mar 2019 09:54:20 GMT

Recently I need to provide a firewall solution to my customer. I would like to propose Cisco PIX 515E to my customer. I knwo Cisco has a separate IDS (Intrusion Detection System) appliance, they didnt put too much effor into this category for their PIX firewall.

Anyhow, does the pix support IPS (Intrusion Prevention System) and IDS?

Re: Does PIX 515 Support IDS/IPS?

wsulym — Fri, 24 Feb 2006 13:27:09 GMT

The pix does have some ids built-in. It's a small subset of the IDS/IPS signatures offered by the appliances. The signature ID's are kept the same across hardware (so signature ID 1000 on a pix is the same signature as on an IDS/IPS appliance).

You add IDS functionality on the pix via "ip audit xxx" commands.

PIX OS 6.3:

http://www.cisco.com/en/US/products/sw/secursw/ps2120/products_command_reference_chapter09186a00801727a9.html

PIX OS 7.1:

http://www.cisco.com/en/US/products/ps6120/products_command_reference_chapter09186a00805fb9f7.html

(The 7.1 docs have a nice table of what signatures are supported natively by pis OS)

Those two links should provide you and overview of the IDS/IPS functionality and signatures available on the PIX itself.

Re: Does PIX 515 Support IDS/IPS?

ovt — Sat, 25 Feb 2006 15:09:29 GMT

Don't use built-in IDS in PIX. Either buy standalone sensor or ASA-5500 with AIP-SSM (which is IPS sensor too).

Re: Does PIX 515 Support IDS/IPS?

sam-lee — Sun, 26 Feb 2006 13:45:00 GMT

Hi,

Thank for your reply. Can you tell me why you do not recommand me to use built-in IDS in PIX?

Re: Does PIX 515 Support IDS/IPS?

ovt — Sun, 26 Feb 2006 14:43:10 GMT

Because its functionality is extremely limited.