Cisco IPS for 10Gbps

[tom.gill]

I see the Cisco IPS 4260 scales up to 1Gb.  What about speeds above 1Gb such as 10Gb?  What solution fits in that scenario?

Thanks!

[jan.nielsen]

IPS 4270 has 10G interfaces and scales to 4Gb, but for higher bandwidth Cisco has reference designs for how to do this with Cisco technology.

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps4077/products_configuration_example09186a0080671a8d.shtml

[Dustin Ralich]

Per the Product Specifications section of the 4200-series product data sheet, the 4260 sensor appliance is generally rated for 1 Gbps - 2 Gbps of traffic inspection (combined/total), with that rating sliding in either direction based on a number of factors/variables (one of which is whether the inspected traffic profile is more transactional or more media-rich).

For greater throughput, the 4270-20 sensor appliance is rated for 2 Gbps - 4 Gbps, and with the optional IPS-2X10GE-SR-INT= interface card, it gains two (2) 10GE fiber sensing interfaces. These can be used to inspect partially-utilized 10GE links (for example), for situations where a 1 Gbps sensing interface isn't enough.

References:

http://www.cisco.com/en/US/prod/collateral/vpndevc/ps5729/ps5713/ps4077/ps9157/product_data_sheet09186a008014873c_ps4077_Products_Data_Sheet.html

http://www.cisco.com/en/US/docs/security/ips/7.0/installation/guide/hw_installing_4270.html#wp18087