04-11-2010 07:32 AM - edited 03-10-2019 04:57 AM
Hello
the following form the cisco reference guide,how the IPS Stops network virus?
cisco Intrusion Prevention Systems (IPS)
--------------------------------------------------------------------
Cisco Intrusion Prevention System (IPS) solutions accurately identify, classify, and
stop malicious traffic, including worms, spyware, adware, network viruses, and
application abuse, before they affect business resiliency.
Thanks
04-11-2010 09:40 AM
The IPS has signatures matching patterns for various viruses and malicious codes.
IPS analyzes the packet/stream and if it matches any of the signatures that are enabled, it will take predefined actions like block/ alert, etc.
You can get more details on the Cisco ips signatures here.
http://tools.cisco.com/security/center/search.x?search=Signature
04-11-2010 09:51 PM
Thanks for ur reply
but is IPS isn't design to be against virus!right,i mean not an Antivirus appliance
04-11-2010 10:00 PM
You are right. IPS is not an anti virus appliance, ie: it will not be able to clean the host which is infected by virus, however, it can help to prevent the spread of network virus. IPS can detect that there is anomaly of the traffic from normal traffic pattern, and will be able to detect and prevent the outbreak of the virus.
Hope that answers your question.
04-11-2010 10:38 PM
Hi halijenn
Thanks for ur reply all time around this forum
Thanks
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide