Cisco IOS IPS

[hakobjanyan]

Hello all

In our company we use cisco 3845 as router and firewall.

on this router we connect 30 workstations and 20 servers.

All workstations and servers in on different subnets.

We wish configure this router also as IPS using IOS IPS.

Please say it is posible or not? Do we have problems with performance in

this situation?

[Karsten Iwen]

IOS IPS will have a significant impact on the CPU. So it depends on the actual load of the router. If the router is only lightly loaded, then it should be no problem to activate the IOS IPS. If you have medium load you should be very selective with the enabled signatures. And if the router has a high load, then you should look for a bigger router before deploying IOS IPS or an external IPS-solution.

Now we only have to specify what is lightly, medium and high load. There the opinions are very different and probably there is no "right" answer.
For me, lightly loaded is up to about 25%, medium up to 50% and high everything above.


Sent from Cisco Technical Support iPad App