Best practices required for IPS.

[k_sinjish]

Hi ,

   I  am using cisco IPS ( Not the next gen – old model dedicate device ) ,  in my environment . Now as part of security practice I would like to strengthen its functionality.   So as part of the hardening and fine tuning the IPS devices what are the best practices need to be   done .

Regards,

Sinjish.K

[nspasov]

I would highly recommend that you explore the options to upgrade to FirePOWER as that solution is very powerful, robust and effective. 

In the meantime, feel free to reference these links:

http://www.cisco.com/c/dam/en/us/products/collateral/security/ios-intrusion-prevention-system-ips/IOS_IPS_Best_Practices.pdf

https://www.sans.org/reading-room/whitepapers/intrusion/network-ids-ips-deployment-strategies-2143

I hope this helps!

Thank you for rating helpful posts!

[Jetsy Mathew]

Upgrading to Firepower is a good option. Refer the following link for further info .

http://www.cisco.com/c/dam/en/us/products/collateral/security/asa-firepower-services/at-a-glance-c45-732426.pdf

If you would like, you can have a look at the following link for one of the release note for the latest available version.

http://www.cisco.com/c/en/us/td/docs/security/firesight/5407/relnotes/FireSIGHT-System-Release-Notes-version5407-and-5416.html