4250SX new model replacement

[darin.marais]

Our client would like to order a replacement unit for the existing 4250-SX models that are installed.

On the Cisco web page they mention the Cisco IPS 4255 Sensor (chassis, software, SSH, four 10/100/1000Base-T with RJ-45 connector -- IPS-4255-K9)

If you need to attach the IPS 4255 to a catalyst 6500 switch using an SX connection, is there a special card that needs to be ordered or is the a bundle model that can be ordered for this purpose.

thanks in advance..

[marcabal · Accepted solution]

The IPS-4255 does not support SX interfaces at this time.

Understand that the IDS-4250-SX was Not replaced by the IPS-4255.

It is only the standard IDS-4250-TX that was replaced by the IPS-4255.

The IDS-4250-SX and IDS-4250-XL have not been replaced, and are still orderable.

The IDS-4250-SX and IDS-4250-XL are still the only IDS/IPS platforms that support SX interfaces.

If a replacement is needed the customer can either order another IDS-4250-SX (or even a IDS-4250-XL) or change to a copper TX interface on the switch and can then order the IPS-4255.

If the customer was intending to order a replacement as just part of a standard upgrade cycle, and their current IDS-4250-SX is still functioning fine; then I would recommend they just continue using their current unit.

The IDS-4250-SX is fully capable of running IPS v5.0 software in promiscuous mode.

If they want to run IPS v5.0 in InLine mode, however, then I would recommend purchasing just the XL card which contains 2 SX interfaces and can be used for InLine monitoring.

They can swap the new XL card with the existing SX card on their current unit without needing to purchase a new sensor.

[rwassom]

To add to marcabal's response, a second SX adapter will soon be supported on the IDS-4250-SX in order to support inline mode. The part number is already available as a spare for the IDS-4250, and can be ordered now: IDS-4250-SX-INT=. This is a much cheaper option than ordering the XL card, but does not offer the same performance (aggregate throughput) improvements.