03-15-2016 02:53 PM - edited 03-10-2019 06:34 AM
I'm running ios ips on a c3825 isr. We were having multiple instances of intermittent latency and poor wan performance. I disabled and retired all signatures from basic category except a handful. I noticed there was still poor performance. I then removed ios ips from the outbound direction of the wan interface. That resolved issue. Ios is only running on in direction on the wan interface. Am i sacrificing anything by just leaving the wan interface set for ips inbound only and removing outbound?
03-15-2016 03:19 PM
Is this really just a private WAN, or is it an Internet circuit?
04-04-2016 07:58 AM
an internet circuit
04-04-2016 12:11 PM
I normally only use it inbound - to protect servers on the inside of the network from the Internet. It's up to the Internet to protect itself from your users.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide